seekrit — secrets for agents

Read the organization's audit trail (most recent first).

Show the org's plan, effective entitlements, current usage, and which upgrade actions are available. Read this if a create action was refused with a plan limit.

Compose a group into an application environment (higher position wins on name clashes). Keyless.

Create an application in an organization. Keyless — then create its environments on the local crypto plane (create_env mints the data key locally).

Create a shared group (reusable secret bag) in an organization. Keyless.

Delete an application and all its environments/secrets. Removes ciphertext — keyless — but irreversible. Confirm intent before calling.

Tear down an ephemeral branch config and every value it overrode. Keyless (it removes ciphertext, never reads it), and the parent environment is untouched. Creating a branch mints a data key, so that stays on the local crypto plane.

Delete an application environment and its secrets. Removes ciphertext — keyless — but irreversible. Confirm intent before calling.

Delete a group and its environments/secrets. Removes ciphertext — keyless — but irreversible. Confirm intent before calling.

Delete a secret from an environment. Removes ciphertext — no key needed. Irreversible except by re-setting it (locally).

The recommended first-project recipe: what to provision here vs. encrypt locally, end to end. Call this before provisioning.

Invite someone to the organization by email (admin only). They join at the given role once they sign in.

Disable a managed KMS key (blocks new operations; existing ciphertexts stay decryptable locally by grantees). Keyless.

List managed KMS keys the caller can see (metadata only — key material is fetched + used locally).

Revoke a principal's grant on a managed KMS key (all versions). Keyless — the caller needs no key material to remove a grant.

List applications in an organization.

List ephemeral branch configs (per-PR / preview environments) in an application, or of one environment. Names, parents, and expiry only — never values.

List the groups composed into an application environment (precedence order).

List environments of an application (names + slugs only, never values).

List a group's environments (per-slug value sets).

List shared groups (reusable secret bags) in an organization.

List pending invitations to join the organization.

List registered temporary-access provisioning targets (Postgres, MySQL, …).

List temporary-access leases (the ledger — never secret material).

List organization members and their public keys (used when granting access locally).

List organizations the caller can access.

List a secret's version history: who wrote each version, when, and which ones were restores. Metadata only — never values. Pair with restore_secret to undo a bad write.

List secret names + versions in an environment. NEVER returns values — reading a value happens on the local crypto plane (see setup_local_crypto).

List an organization's service tokens (metadata only — never the token strings).

Given a crypto-plane operation this hosted server can't do (e.g. set_secret, create_env, run_command), return exactly how to do it locally. Use when a tool you expected is missing here.

Rename an application's display name (the slug is immutable). Keyless.

Rename a group's display name (the slug is immutable). Keyless.

Roll a secret back to an earlier version (see list_secret_versions). The stored ciphertext is replayed as a NEW version — history is append-only, nothing is overwritten. Keyless: no decryption happens, so this works here on the metadata plane.

Revoke a pending organization invitation.

Revoke a temporary-access lease now (drops the credential immediately).

Revoke a service token by id. Future DEK fetches stop immediately. Rotate the environment (locally) if the holder may have cached the key.

How to run the local crypto plane (the `@seekrit/mcp` npm server, the CLI, or seekrit-run) so you can set and use secret values — with a copy-paste .mcp.json. Call this the moment you need a secret's value.

Create a seekrit workspace and your own machine credential — one call, no human, no browser. Binds the credential to this session, so every other tool works on your next call with no config change and no reconnect. Save the returned clientId + clientSecret: the secret is shown once and is how you reconnect later. Call this if a tool says you have no credential.

Remove a composed group from an application environment. Keyless.

Show the authenticated machine client and the org it can access. Call this first.