Skip to content

ncrypted

by Seidl-Family · remote · local (npm) · no sign-in to list tools · v0.2.2 · published by GitHub user Seidl-Family

One-time, end-to-end encrypted secrets for agents. 0.005 USDC per secret via x402.

Deletes · 2Changes · 1
CompareRegistry entry

4 tools: 2 can delete or cancel things, 1 change things and 1 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http ncrypted https://ncrypted.ai/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn1 info
  • Warnncrypted_read

    The server marks "ncrypted_read" destructive (destructiveHint: true), and its name says "read", a word for reading.

    Matched text

    annotations: {"destructiveHint":true,"idempotentHint":false}; The name "ncrypted_read" says "read": a word for reading.

    What this check looks for
  • Infoncrypted_burn

    The description mentions "credential".

    Matched text

    description: "...recipient has the value, so rotate the credential. Only works for secrets you created (ne..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

4 tools

Deletes or cancels 2Claude Code: deny
  • ncrypted_burnPermanently destroy an unread secret you created, so its link stops working (e.g.1 finding

    Why it is in this group

    • The description's first verb is "destroy": a word for removing or ending something.
    • The description says "Permanently destroy".
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...recipient has the value, so rotate the credential. Only works for secrets you created (ne..."

      What this check looks for
    Description, as the server wrote it
    Permanently destroy an unread secret you created, so its link stops working (e.g. it was sent to the wrong place or is no longer needed). Irreversible. Returns { burned: true } if it was destroyed, or { burned: false, status } if there was nothing left to destroy because it was already read, burned or expired; if it was already read, the recipient has the value, so rotate the credential. Only works for secrets you created (needs their receiptToken). Free.

    Annotations the server declares

    • destructiveHint: true
  • ncrypted_readOpen an ncrypted link (https://.../s/{id}#{key}) and return the secret.1 finding

    Why it is in this group

    • The name "ncrypted_read" says "read": a word for reading.
    • The description's first verb is "open": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    Findings

    • Warn

      The server marks "ncrypted_read" destructive (destructiveHint: true), and its name says "read", a word for reading.

      Matched text

      annotations: {"destructiveHint":true,"idempotentHint":false}; The name "ncrypted_read" says "read": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Open an ncrypted link (https://.../s/{id}#{key}) and return the secret. This destroys it permanently. Free. Only use the value for the task at hand and do not repeat it in chat. To check whether someone opened a link you created, use ncrypted_status instead (it doesn't consume anything). Hosted mode: this server decrypts the secret for you, so it sees the plaintext briefly over TLS (never stored or logged). For end-to-end, zero-knowledge encryption run the local MCP server `npx -y @seidl-family/ncrypted-mcp` instead.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: false
Changes things 1Claude Code: ask
  • ncrypted_createStore a password, API key or sensitive note as a one-time link that self-destructs after a single read.No findings

    Why it is in this group

    • The name "ncrypted_create" says "create": a word for a change.
    Description, as the server wrote it
    Store a password, API key or sensitive note as a one-time link that self-destructs after a single read. The first 3 per day are free (TTL up to 24h); after that each costs 0.005 USDC, paid via x402 on Base (your MCP client must support x402). Share the link with a person or another agent; never echo the secret in chat. Returns { link, id, receiptToken, expiresAt }; keep id and receiptToken to check delivery (ncrypted_status) or revoke the link (ncrypted_burn). Hosted mode: this server encrypts the secret for you, so it sees the plaintext briefly over TLS (never stored or logged). For end-to-end, zero-knowledge encryption run the local MCP server `npx -y @seidl-family/ncrypted-mcp` instead.
Only reads 1Claude Code: allow
  • ncrypted_statusCheck whether a secret you created has been opened yet, without consuming it.No findings

    Why it is in this group

    • The name "ncrypted_status" says "status": a word for reading.
    Description, as the server wrote it
    Check whether a secret you created has been opened yet, without consuming it. Returns { status, expiresAt, readAt? } where status is pending (not opened), read, burned or expired. Use it to confirm delivery, or before deciding to ncrypted_burn a link. Only works for secrets you created (needs their receiptToken); to open a link, use ncrypted_read. Free.

    Annotations the server declares

    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http ncrypted https://ncrypted.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__ncrypted__ncrypted_status"
    ],
    "ask": [
      "mcp__ncrypted__ncrypted_create"
    ],
    "deny": [
      "mcp__ncrypted__ncrypted_read",
      "mcp__ncrypted__ncrypted_burn"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as ncrypted. Review it before you use it.