sealed-mcp

Thin MCP stdio client for Sealed — the skill marketplace where your skill runs sealed.

This package is a pure proxy. It connects your MCP-capable agent to a remote Sealed server and exposes two tools:

Skill bodies never reach this process. Skills execute on Sealed's infrastructure; this client only carries your inputs up and the output back. There is no local execution mode — SEALED_API_URL is required.

Zero runtime dependencies. Plain Node 18+ (uses the global fetch).

npm naming: this package targets the unscoped name sealed-mcp and carries mcpName: io.github.edwardyen724-g/sealed for the official MCP registry. If that npm name is unavailable at publish time, the fallbacks are the scoped names @sealed/mcp or @sealedrun/mcp — update package.json, registry drafts, and install snippets together.

Install / configure

Claude Code

claude mcp add sealed --env SEALED_API_URL=https://sealed.run --env SEALED_API_KEY=sealed_sk_… -- npx -y sealed-mcp

Cursor / Windsurf

Add to ~/.cursor/mcp.json (Cursor) or ~/.codeium/windsurf/mcp_config.json (Windsurf):

{
  "mcpServers": {
    "sealed": {
      "command": "npx",
      "args": ["-y", "sealed-mcp"],
      "env": {
        "SEALED_API_URL": "https://sealed.run",
        "SEALED_API_KEY": "sealed_sk_…"
      }
    }
  }
}

Generic stdio MCP client

Spawn the binary and speak newline-delimited JSON-RPC 2.0 over stdin/stdout (initialize, tools/list, tools/call):

SEALED_API_URL=https://sealed.run SEALED_API_KEY=sealed_sk_… npx -y sealed-mcp

Related MCP server: Cicall

Environment variables

Errors you may see

Fixed, non-leaking error strings: unauthorized (bad/missing key), insufficient funds (top up your wallet), output blocked by leak gate, unknown skill: <id>, cannot reach the Sealed API. Server error bodies are never echoed.

Links

• Website: https://sealed.run

• Get an API key: sign up at your Sealed server's /signup endpoint (production emails you a single-use sign-in link that shows the key once)