Skip to main content
Glama
secr-dev

@secr/mcp

Official
by secr-dev

@secr/mcp

Secr MCP server — gives AI coding agents (Claude Code, Cursor, Copilot) direct access to secrets via the Model Context Protocol.

Install

npm install @secr/mcp

Related MCP server: Phantom Secrets MCP Server

Setup

Claude Code

claude mcp add secr -e SECR_TOKEN=secr_agent_xxx -- npx @secr/mcp

Cursor

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "secr": {
      "command": "npx",
      "args": ["@secr/mcp"],
      "env": { "SECR_TOKEN": "secr_agent_xxx" }
    }
  }
}

VS Code (Copilot)

Add to .vscode/mcp.json:

{
  "servers": {
    "secr": {
      "command": "npx",
      "args": ["@secr/mcp"],
      "env": { "SECR_TOKEN": "secr_agent_xxx" }
    }
  }
}

Tools

The server exposes 5 tools to AI agents:

Tool

Description

get_secret

Get a single secret value by key

list_secrets

List secret key names (no values) with optional search

set_secret

Create or update a secret

delete_secret

Delete a secret

list_environments

List environments for a project

All tools accept optional org, project, and environment parameters. When omitted, they resolve from environment variables or .secr.json.

Environment Variables

Variable

Required

Default

Description

SECR_TOKEN

Yes

--

Agent token (secr_agent_...)

SECR_ORG

No

.secr.json

Organization slug

SECR_PROJECT

No

.secr.json

Project slug

SECR_ENVIRONMENT

No

.secr.json

Default environment slug

SECR_API_URL

No

https://api.secr.dev

API base URL

Creating an Agent Token

secr agents create --name "claude-code" --scope "read:secrets,write:secrets"

Agent tokens use scoped permissions — the server only has access to what the token allows.

Documentation

Full docs at secr.dev/docs.

License

MIT

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI coding tools to securely manage secrets via MCP tools for vault operations, diagnostics, and cloud sync, ensuring real keys never enter the LLM context.
    16
    MIT
  • A
    license
    C
    quality
    C
    maintenance
    Enables AI agents to securely store and manage encrypted secrets locally while using them indirectly through environment-variable injection or file writes, so plaintext values never enter the agent's context.
    8
    MIT