One-time, end-to-end encrypted secrets for agents. 0.005 USDC per secret via x402.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Permanently destroy an unread secret you created, so its link stops working (e.g. it was sent to the wrong place or is no longer needed). Irreversible. Returns { burned: true } if it was destroyed, or { burned: false, status } if there was nothing left to destroy because it was already read, burned or expired; if it was already read, the recipient has the value, so rotate the credential. Only works for secrets you created (needs their receiptToken). Free.
The secret's id, returned as `id` by ncrypted_create.
The creator's receipt token, returned as `receiptToken` by ncrypted_create. Only the creator has it; the link alone isn't enough.
The server marks this tool as destructive. Running it may delete or overwrite data on the server or in any account you connected with your headers.
Permanently destroy an unread secret you created, so its link stops working (e.g. it was sent to the wrong place or is no longer needed). Irreversible. Returns { burned: true } if it was destroyed, or { burned: false, status } if there was nothing left to destroy because it was already read, burned or expired; if it was already read, the recipient has the value, so rotate the credential. Only works for secrets you created (needs their receiptToken). Free.
| Argument | Type | Description |
|---|---|---|
| id* | string | The secret's id, returned as `id` by ncrypted_create. |
| receiptToken* | string | The creator's receipt token, returned as `receiptToken` by ncrypted_create. Only the creator has it; the link alone isn't enough. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"id",
"receiptToken"
],
"properties": {
"id": {
"type": "string",
"description": "The secret's id, returned as `id` by ncrypted_create."
},
"receiptToken": {
"type": "string",
"description": "The creator's receipt token, returned as `receiptToken` by ncrypted_create. Only the creator has it; the link alone isn't enough."
}
}
}Store a password, API key or sensitive note as a one-time link that self-destructs after a single read. The first 3 per day are free (TTL up to 24h); after that each costs 0.005 USDC, paid via x402 on Base (your MCP client must support x402). Share the link with a person or another agent; never echo the secret in chat. Returns { link, id, receiptToken, expiresAt }; keep id and receiptToken to check delivery (ncrypted_status) or revoke the link (ncrypted_burn). Hosted mode: this server encrypts the secret for you, so it sees the plaintext briefly over TLS (never stored or logged). For end-to-end, zero-knowledge encryption run the local MCP server `npx -y @seidl-family/ncrypted-mcp` instead.
| Argument | Type | Description |
|---|---|---|
| secret* | string | The sensitive value to share. Max 64 KB. |
| passphrase | string | Optional second factor the recipient also needs. Share it through a different channel. |
| ttl_seconds | integer | Expiry if never read. Default 86400 (24h), max 7 days. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"secret"
],
"properties": {
"secret": {
"type": "string",
"maxLength": 65536,
"minLength": 1,
"description": "The sensitive value to share. Max 64 KB."
},
"passphrase": {
"type": "string",
"description": "Optional second factor the recipient also needs. Share it through a different channel."
},
"ttl_seconds": {
"type": "integer",
"maximum": 604800,
"minimum": 300,
"description": "Expiry if never read. Default 86400 (24h), max 7 days."
}
}
}Open an ncrypted link (https://.../s/{id}#{key}) and return the secret. This destroys it permanently. Free. Only use the value for the task at hand and do not repeat it in chat. To check whether someone opened a link you created, use ncrypted_status instead (it doesn't consume anything). Hosted mode: this server decrypts the secret for you, so it sees the plaintext briefly over TLS (never stored or logged). For end-to-end, zero-knowledge encryption run the local MCP server `npx -y @seidl-family/ncrypted-mcp` instead.
| Argument | Type | Description |
|---|---|---|
| link* | string | The full ncrypted link including the #key fragment. |
| passphrase | string | Required only if the sender set a passphrase. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"link"
],
"properties": {
"link": {
"type": "string",
"format": "uri",
"description": "The full ncrypted link including the #key fragment."
},
"passphrase": {
"type": "string",
"description": "Required only if the sender set a passphrase."
}
}
}Check whether a secret you created has been opened yet, without consuming it. Returns { status, expiresAt, readAt? } where status is pending (not opened), read, burned or expired. Use it to confirm delivery, or before deciding to ncrypted_burn a link. Only works for secrets you created (needs their receiptToken); to open a link, use ncrypted_read. Free.
| Argument | Type | Description |
|---|---|---|
| id* | string | The secret's id, returned as `id` by ncrypted_create. |
| receiptToken* | string | The creator's receipt token, returned as `receiptToken` by ncrypted_create. Only the creator has it; the link alone isn't enough. |
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"id",
"receiptToken"
],
"properties": {
"id": {
"type": "string",
"description": "The secret's id, returned as `id` by ncrypted_create."
},
"receiptToken": {
"type": "string",
"description": "The creator's receipt token, returned as `receiptToken` by ncrypted_create. Only the creator has it; the link alone isn't enough."
}
}
}