seekrit — secrets for agents

Create a seekrit workspace and your own machine credential — one call, no human, no browser. Binds the credential to this session, so every other tool works on your next call with no config change and no reconnect. Save the returned clientId + clientSecret: the secret is shown once and is how you re

The recommended first-project recipe: what to provision here vs. encrypt locally, end to end. Call this before provisioning.

How to run the local crypto plane (the `@seekrit/mcp` npm server, the CLI, or seekrit-run) so you can set and use secret values — with a copy-paste .mcp.json. Call this the moment you need a secret's value.

Given a crypto-plane operation this hosted server can't do (e.g. set_secret, create_env, run_command), return exactly how to do it locally. Use when a tool you expected is missing here.

Show the authenticated machine client and the org it can access. Call this first.

List organizations the caller can access.

List applications in an organization.

List environments of an application (names + slugs only, never values).

List ephemeral branch configs (per-PR / preview environments) in an application, or of one environment. Names, parents, and expiry only — never values.

List shared groups (reusable secret bags) in an organization.

List a group's environments (per-slug value sets).

List the groups composed into an application environment (precedence order).

List organization members and their public keys (used when granting access locally).

List secret names + versions in an environment. NEVER returns values — reading a value happens on the local crypto plane (see setup_local_crypto).

List a secret's version history: who wrote each version, when, and which ones were restores. Metadata only — never values. Pair with restore_secret to undo a bad write.

List an organization's service tokens (metadata only — never the token strings).

List pending invitations to join the organization.

List managed KMS keys the caller can see (metadata only — key material is fetched + used locally).

List registered temporary-access provisioning targets (Postgres, MySQL, …).

List temporary-access leases (the ledger — never secret material).

Read the organization's audit trail (most recent first).

Show the org's plan, effective entitlements, current usage, and which upgrade actions are available. Read this if a create action was refused with a plan limit.

Create an application in an organization. Keyless — then create its environments on the local crypto plane (create_env mints the data key locally).

Create a shared group (reusable secret bag) in an organization. Keyless.

Compose a group into an application environment (higher position wins on name clashes). Keyless.

Remove a composed group from an application environment. Keyless.

Invite someone to the organization by email (admin only). They join at the given role once they sign in.

Rename an application's display name (the slug is immutable). Keyless.

Rename a group's display name (the slug is immutable). Keyless.

Roll a secret back to an earlier version (see list_secret_versions). The stored ciphertext is replayed as a NEW version — history is append-only, nothing is overwritten. Keyless: no decryption happens, so this works here on the metadata plane.

Delete a secret from an environment. Removes ciphertext — no key needed. Irreversible except by re-setting it (locally).

Revoke a service token by id. Future DEK fetches stop immediately. Rotate the environment (locally) if the holder may have cached the key.

Revoke a pending organization invitation.

Revoke a temporary-access lease now (drops the credential immediately).

Disable a managed KMS key (blocks new operations; existing ciphertexts stay decryptable locally by grantees). Keyless.

Revoke a principal's grant on a managed KMS key (all versions). Keyless — the caller needs no key material to remove a grant.

Delete an application and all its environments/secrets. Removes ciphertext — keyless — but irreversible. Confirm intent before calling.

Delete a group and its environments/secrets. Removes ciphertext — keyless — but irreversible. Confirm intent before calling.

Delete an application environment and its secrets. Removes ciphertext — keyless — but irreversible. Confirm intent before calling.

Tear down an ephemeral branch config and every value it overrode. Keyless (it removes ciphertext, never reads it), and the parent environment is untouched. Creating a branch mints a data key, so that stays on the local crypto plane.