Server definition

Hash: sha256:724b457344ae3880f4d7bf39e7b88b85766c4e8db8aff3e1eaa4693ce74b8307
What it is: What a remote MCP server returned when asked what it offers: 40 tools

The blob, as servednamed by its sha256

{
  "instructions": "seekrit stores the credentials your code needs — API keys, database URLs, tokens\n— encrypted so that neither this server nor anyone operating it can read them.\n\nReach for it when:\n- You are about to write a real credential into a .env file, a config file, or a\n  repo, and would rather it not be sitting on disk or in version control.\n- A secret is in your context (a user pasted it, a provider just issued it) and\n  needs to go somewhere that isn't a transcript.\n- You need to run a command that requires DATABASE_URL / API_KEY and don't have\n  one to hand.\n- You are handing work back to a human and the credentials you set up would\n  otherwise be lost when you stop running.\n\nUSE A SECRET WITHOUT EVER READING IT. `run_command` (local — see below) decrypts\ninto a subprocess's environment, so the process gets the real value and your\ncontext never does. Prefer it over fetching a value you only need to pass along:\nnothing you never saw can leak through you.\n\nSTART HERE: no account is needed to look around — you are already connected. Call\n`get_started` for the whole arc, or `signup` (one call, names the org for the real\nproject you're working on) to get a machine credential and a workspace. `signup`\nbinds that credential to this session, so the other tools work immediately; save\nthe returned client id + secret to keep using it later.\n\nTHE ONE BOUNDARY: this hosted server holds no keys and can never see plaintext, so\nit does structure — orgs, apps, environments, groups, audit, billing, and secret\nNAMES. Anything that touches a secret's VALUE (set it, read it, create an\nenvironment, mint a token, run a command with secrets) happens on your own machine\nvia `npx -y @seekrit/mcp`, using the SAME credential. Call `setup_local_crypto`\nthe moment you need a value and it hands you the exact command.",
  "tools": [
    {
      "description": "Read the organization's append-only audit trail, most recent first — every mutation across apps, environments, secrets, members, and tokens. Use it to answer \"what changed and who did it\"; for one secret's history specifically, list_secret_versions is narrower and cheaper. Returns [{ id, action, actorType, actorId, resourceType, resourceId, metadata, ipAddress, createdAt }].",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "action": {
            "description": "Exact action name to filter by, e.g. \"secret.updated\" or \"app.deleted\". Omit for every action. Read the values off an unfiltered call rather than guessing.",
            "type": "string"
          },
          "limit": {
            "description": "How many entries to return, newest first. 1–200, default 50.",
            "maximum": 200,
            "minimum": 1,
            "type": "integer"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "audit",
      "outputSchema": null
    },
    {
      "description": "Show the org's plan, effective entitlements, current usage, and which upgrade actions are available. Read this if a create action was refused with a plan limit — it names the limit you hit and how to lift it. Returns { plan, subscription, promo, entitlements, usage, overrides, enforced, manage } — `enforced: false` means plan limits are not currently applied, and `manage` carries the upgrade paths.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "billing",
      "outputSchema": null
    },
    {
      "description": "Compose a shared group into an application environment, so that environment resolves the group's secrets as well as its own. Safe to repeat — composing an already-composed group just updates its position. Use uncompose_group to undo, and list_env_groups to see the current order. No key material involved, so it runs here. Returns the composed { groupId, slug, name, position }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "env": {
            "description": "Environment slug or id within that application, as returned by list_envs (e.g. \"production\").",
            "type": "string"
          },
          "group": {
            "description": "Shared-group slug or id, as returned by list_groups (e.g. \"shared-datastores\").",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          },
          "position": {
            "description": "Precedence among the environment's composed groups: on a name clash the HIGHER position wins, and the environment's own secrets beat every group. Omit to append at the end. Read the current order from list_env_groups first.",
            "maximum": 9007199254740991,
            "minimum": 0,
            "type": "integer"
          }
        },
        "required": [
          "app",
          "env",
          "group"
        ],
        "type": "object"
      },
      "name": "compose_group",
      "outputSchema": null
    },
    {
      "description": "Create an application — the container that will own environments and secrets. This step needs no key material, so it runs here. Creating its environments does NOT: create_env mints a data key and lives on the local crypto plane (call setup_local_crypto). Returns the new { id, orgId, name, slug, createdAt }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "name": {
            "description": "Human-readable display name, e.g. \"Acme Storefront\". Can be renamed later.",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          },
          "slug": {
            "description": "URL-safe identifier used by every other tool to refer to this app: lowercase letters, numbers, hyphens (e.g. \"acme-storefront\"). Immutable once created — choose it carefully.",
            "type": "string"
          }
        },
        "required": [
          "name",
          "slug"
        ],
        "type": "object"
      },
      "name": "create_app",
      "outputSchema": null
    },
    {
      "description": "Create a shared group — a reusable bag of secrets (a shared datastore, a vendor account) that many application environments compose in rather than each keeping a copy. Use create_app instead for a deployable service. No key material involved, so it runs here; the group's environments are minted locally by create_group_env. Returns the new { id, orgId, name, slug, createdAt }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "name": {
            "description": "Human-readable display name, e.g. \"Shared Datastores\". Can be renamed later.",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          },
          "slug": {
            "description": "URL-safe identifier the other tools refer to this group by: lowercase letters, numbers, hyphens (e.g. \"shared-datastores\"). Immutable once created.",
            "type": "string"
          }
        },
        "required": [
          "name",
          "slug"
        ],
        "type": "object"
      },
      "name": "create_group",
      "outputSchema": null
    },
    {
      "description": "Delete an application together with all of its environments and their secrets, discarding the ciphertext. Irreversible — there is no undo and no export. This is the widest-blast-radius tool here; prefer delete_env for a single environment, or rename_app if the name is the only problem. Confirm intent with a human before calling. Returns { ok, app }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app"
        ],
        "type": "object"
      },
      "name": "delete_app",
      "outputSchema": null
    },
    {
      "description": "Tear down an ephemeral branch config and every value it overrode. The parent environment is untouched — only the branch's own overrides go — which makes this the routine cleanup when a PR merges. Irreversible; creating a branch mints a data key, so create_branch stays on the local crypto plane. Find the slug with list_branches. Returns { ok, branch }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "branch": {
            "description": "Branch slug or id within the application, as returned by list_branches.",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app",
          "branch"
        ],
        "type": "object"
      },
      "name": "delete_branch",
      "outputSchema": null
    },
    {
      "description": "Delete one application environment and the secrets it owns, discarding the ciphertext. Irreversible, and the environment's data key goes with it — recreating the environment means setting every value again on the local crypto plane. Sibling environments and the application itself are untouched; use delete_app to remove all of them. Confirm intent before calling. Returns { ok, env }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "env": {
            "description": "Environment slug or id within that application, as returned by list_envs (e.g. \"production\").",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app",
          "env"
        ],
        "type": "object"
      },
      "name": "delete_env",
      "outputSchema": null
    },
    {
      "description": "Delete a shared group together with its environments and their secrets, discarding the ciphertext. Irreversible. Every application environment that composed this group loses those names — check list_env_groups (or use uncompose_group) before deciding the group is unused. Confirm intent before calling. Returns { ok, group }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "group": {
            "description": "Shared-group slug or id, as returned by list_groups (e.g. \"shared-datastores\").",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "group"
        ],
        "type": "object"
      },
      "name": "delete_group",
      "outputSchema": null
    },
    {
      "description": "Delete a secret from an environment, discarding its ciphertext and every version. Irreversible — restore_secret CANNOT bring it back (that only rolls back within a surviving secret's history), and re-creating it means setting the value again on the local crypto plane. Prefer restore_secret to undo a bad write. Confirm intent before calling. Returns { ok, name } — or { ok, queued: true, changeRequestId } if the environment requires approval, in which case NOTHING was deleted until a human approves.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "env": {
            "description": "Environment slug or id within that application, as returned by list_envs (e.g. \"production\").",
            "type": "string"
          },
          "name": {
            "description": "The secret's name — the variable name it is injected as, e.g. \"DATABASE_URL\". Names come from list_secrets; this is never a value.",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app",
          "env",
          "name"
        ],
        "type": "object"
      },
      "name": "delete_secret",
      "outputSchema": null
    },
    {
      "description": "Read the recommended first-project recipe end to end: which steps run here and which need the local crypto plane. Takes no arguments and returns a prose walkthrough. Call this before provisioning anything — it is cheaper than discovering the plane boundary one failed tool at a time.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {},
        "type": "object"
      },
      "name": "get_started",
      "outputSchema": null
    },
    {
      "description": "Invite a human to the organization by email (admin only). They join at the given role once they sign in. Use this to hand a project off to a person — then grant them decryption with `grant_env` on the LOCAL crypto plane, since an invite alone conveys no ability to read values. Returns the pending { id, orgId, email, role, invitedById, createdAt }; revoke_invite cancels it.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "email": {
            "description": "Email address to invite. They receive an invitation and become a member on first sign-in; until then they appear in list_invites, not list_members.",
            "format": "email",
            "pattern": "^(?:[A-Za-z0-9_'+\\-]+\\.)*[A-Za-z0-9_'+\\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          },
          "role": {
            "description": "Role granted on join. \"member\" (the default) can use the org; \"admin\" can also invite others and delete resources.",
            "enum": [
              "member",
              "admin"
            ],
            "type": "string"
          }
        },
        "required": [
          "email"
        ],
        "type": "object"
      },
      "name": "invite_member",
      "outputSchema": null
    },
    {
      "description": "Disable a managed KMS key: new encrypt/sign operations are blocked, while data already encrypted under it stays decryptable locally by existing grantees. Reversible only by an operator re-enabling the key — there is no enable tool here. Use kms_revoke_grant instead to cut off ONE principal while the key stays in service. Find the id with kms_list_keys. Returns the updated key, with `disabledAt` now set.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "keyId": {
            "description": "The managed key's id, from kms_list_keys (the `id` field — `name` is a display label and is not accepted here).",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "keyId"
        ],
        "type": "object"
      },
      "name": "kms_disable_key",
      "outputSchema": null
    },
    {
      "description": "List the managed KMS keys the caller can see — symmetric and signing keys seekrit stores wrapped, for encrypting data outside the secret store. Metadata only: key material is fetched and used on the local crypto plane (kms_encrypt / kms_decrypt / kms_sign live there, not here). Use it to find a `keyId` for kms_disable_key or kms_revoke_grant. Returns [{ id, name, purpose, spec, currentVersion, applicationId, groupId, disabledAt, createdAt }] — a non-null `disabledAt` means the key is already disabled.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "kms_list_keys",
      "outputSchema": null
    },
    {
      "description": "Revoke one principal's grant on a managed KMS key, across all its versions — that user or service token can no longer use the key, while everyone else keeps working. Use kms_disable_key instead to stop the key entirely. Removing a grant needs no key material, which is why it runs here. Returns { ok, keyId, principalId }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "keyId": {
            "description": "The managed key's id, from kms_list_keys (the `id` field — `name` is a display label and is not accepted here).",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          },
          "principalId": {
            "description": "The principal's id — a `userId` from list_members, or a token `id` from list_tokens, matching principalType.",
            "type": "string"
          },
          "principalType": {
            "description": "What kind of principal to revoke: \"user\" for a human member (list_members) or \"service_token\" for a machine credential (list_tokens).",
            "enum": [
              "user",
              "service_token"
            ],
            "type": "string"
          }
        },
        "required": [
          "keyId",
          "principalType",
          "principalId"
        ],
        "type": "object"
      },
      "name": "kms_revoke_grant",
      "outputSchema": null
    },
    {
      "description": "List the applications in an organization — an application is the top-level container that owns environments, which in turn own secrets. Start here when you know the org but not the app slug the other tools need. Returns [{ id, orgId, name, slug, createdAt }]; use list_envs next to descend into one.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "list_apps",
      "outputSchema": null
    },
    {
      "description": "List ephemeral branch configs (per-PR / preview environments) across an application, or just those forked from one environment. Names, parents, and expiry only — never values. Use it before delete_branch to find a branch slug, or to spot branches that have already expired. Returns Environment rows with `parentEnvironmentId` set: [{ id, name, slug, parentEnvironmentId, expiresAt, createdAt }] — `expiresAt` is null for a branch with no TTL.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "env": {
            "description": "Optional environment slug or id to narrow to branches forked from that one environment. Omit to list every branch in the application.",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app"
        ],
        "type": "object"
      },
      "name": "list_branches",
      "outputSchema": null
    },
    {
      "description": "List the shared groups composed INTO one application environment, in precedence order (higher position wins a name clash). Read this to explain where a secret name actually comes from, or to pick the next `position` for compose_group. The inverse direction of list_group_envs. Returns [{ groupId, slug, name, position }], highest position last.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "env": {
            "description": "Environment slug or id within that application, as returned by list_envs (e.g. \"production\").",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app",
          "env"
        ],
        "type": "object"
      },
      "name": "list_env_groups",
      "outputSchema": null
    },
    {
      "description": "List the environments an application owns (production, staging, …). Names and slugs only — never values. Use this to find the `env` slug that list_secrets and the delete/restore tools take. Returns [{ id, name, slug, applicationId, groupId, parentEnvironmentId, expiresAt, createdAt }]. Not to be confused with list_env_groups (which groups feed INTO an app environment) or list_group_envs (the environments of a shared GROUP).",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app"
        ],
        "type": "object"
      },
      "name": "list_envs",
      "outputSchema": null
    },
    {
      "description": "List the environments belonging to one shared GROUP — a group holds a separate value set per slug, so its `production` differs from its `staging`. Use this when you already have a group and want its own environments; use list_envs for an application's, and list_env_groups to see which groups an application environment pulls from. Returns Environment rows with `groupId` set: [{ id, name, slug, groupId, createdAt }].",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "group": {
            "description": "Shared-group slug or id, as returned by list_groups (e.g. \"shared-datastores\").",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "group"
        ],
        "type": "object"
      },
      "name": "list_group_envs",
      "outputSchema": null
    },
    {
      "description": "List the shared groups in an organization — a group is a reusable bag of secrets (a shared datastore, a vendor account) that many application environments can compose in rather than duplicating. Use it to find the `group` slug compose_group and list_group_envs take. Returns [{ id, orgId, name, slug, createdAt }]; not paginated.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "list_groups",
      "outputSchema": null
    },
    {
      "description": "List invitations to the organization that have been sent but not yet accepted. Use it to confirm an invite_member call landed, or to find an `inviteId` for revoke_invite. Accepted invitations become members — see list_members. Returns [{ id, orgId, email, role, invitedById, createdAt }].",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "list_invites",
      "outputSchema": null
    },
    {
      "description": "List the registered temporary-access targets — the databases (Postgres, MySQL, …) against which short-lived credentials can be minted on demand instead of storing a standing password. Use it to see what can be leased before minting one (create_pg_lease / create_mysql_lease run on the LOCAL crypto plane), and see list_leases for what has actually been issued. Returns [{ id, orgId, provider, name, config, createdAt }], where `provider` names the kind of target (postgres, mysql, …) and `config` is non-secret connection settings.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "list_lease_targets",
      "outputSchema": null
    },
    {
      "description": "List temporary-access leases that have been issued — the ledger of who got a short-lived credential against which target and until when. Never includes the credential itself. Use it to find a `leaseId` for revoke_lease, or to check whether a lease has already expired before revoking it; list_lease_targets shows what CAN be leased. Returns [{ id, targetId, provider, status, principalType, principalId, expiresAt, endedAt, endedReason, createdAt }] — only `status: \"active\"` leases are worth revoking.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "list_leases",
      "outputSchema": null
    },
    {
      "description": "List organization members with their public keys. The public keys are what you pass to `grant_env` on the LOCAL crypto plane to give a human the ability to decrypt — so call this when handing a project off to a person. Returns [{ userId, email, name, role, publicKeyJwk }]; `publicKeyJwk` is null for a member who has not finished key setup, and such a member cannot be granted decryption yet.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "list_members",
      "outputSchema": null
    },
    {
      "description": "List the organizations this credential can access. Use it to find the `org` slug every other tool takes; prefer whoami if you also want to confirm which client you are. Returns [{ id, name, slug, role, createdAt }].",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {},
        "type": "object"
      },
      "name": "list_orgs",
      "outputSchema": null
    },
    {
      "description": "List one secret's version history: who wrote each version, when, and which ones were restores. Metadata only — never values. Pair with restore_secret to undo a bad write: read the history here, then pass the version number you want back. Returns { currentVersion, versions: [{ version, createdAt, createdBy, restoredFromVersion }] }, newest first.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "env": {
            "description": "Environment slug or id within that application, as returned by list_envs (e.g. \"production\").",
            "type": "string"
          },
          "limit": {
            "description": "How many versions to return, newest first. 1–200, default 20.",
            "maximum": 200,
            "minimum": 1,
            "type": "integer"
          },
          "name": {
            "description": "The secret's name — the variable name it is injected as, e.g. \"DATABASE_URL\". Names come from list_secrets; this is never a value.",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app",
          "env",
          "name"
        ],
        "type": "object"
      },
      "name": "list_secret_versions",
      "outputSchema": null
    },
    {
      "description": "List the secret NAMES and versions in an environment. NEVER returns values: this server cannot decrypt. Use it to discover which names exist before referencing them; to read a value, run the local crypto plane (see setup_local_crypto) — no tool here will ever return one. Returns [{ name, version, updatedAt }].",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "env": {
            "description": "Environment slug or id within that application, as returned by list_envs (e.g. \"production\").",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app",
          "env"
        ],
        "type": "object"
      },
      "name": "list_secrets",
      "outputSchema": null
    },
    {
      "description": "List an organization's service tokens — the long-lived credentials that let a deployed workload fetch secrets. Metadata only: the token strings are shown once at creation (on the local crypto plane) and are never retrievable here. Use it to find a `tokenId` for revoke_token, or to audit what still has access. Returns [{ id, name, role, environmentId, expiresAt, lastUsedAt, revokedAt, createdAt }] — `environmentId` is null for an org-admin token, and a non-null `revokedAt` means it is already revoked.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "list_tokens",
      "outputSchema": null
    },
    {
      "description": "Look up how to perform one crypto-plane operation locally — the targeted answer for \"the tool I expected is not on this server\". Returns { operation, where, how } for a known operation, or a note explaining the plane boundary for an unrecognised one. Use setup_local_crypto instead when you need the whole local setup rather than one command.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "operation": {
            "description": "The tool name you were looking for, in snake_case as it appears on the local plane — e.g. \"set_secret\", \"get_secret\", \"create_env\", \"create_token\", \"grant_env\", \"run_command\". Unknown names return the general boundary rule rather than an error.",
            "type": "string"
          }
        },
        "required": [
          "operation"
        ],
        "type": "object"
      },
      "name": "local_tool_for",
      "outputSchema": null
    },
    {
      "description": "Change an application's display name. The slug is immutable — every other tool refers to the app by slug, so a rename breaks nothing. Use delete_app + create_app only if the slug itself must change. Returns the updated { id, orgId, name, slug, createdAt }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "name": {
            "description": "The new display name, e.g. \"Acme Storefront (EU)\".",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app",
          "name"
        ],
        "type": "object"
      },
      "name": "rename_app",
      "outputSchema": null
    },
    {
      "description": "Change a shared group's display name. The slug is immutable — references from composed environments are by slug, so a rename breaks nothing. Returns the updated { id, orgId, name, slug, createdAt }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "group": {
            "description": "Shared-group slug or id, as returned by list_groups (e.g. \"shared-datastores\").",
            "type": "string"
          },
          "name": {
            "description": "The new display name, e.g. \"Shared Datastores (EU)\".",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "group",
          "name"
        ],
        "type": "object"
      },
      "name": "rename_group",
      "outputSchema": null
    },
    {
      "description": "Roll a secret back to an earlier version — the undo for a bad write. The stored ciphertext is replayed as a NEW version, so history is append-only and nothing is overwritten. Read list_secret_versions first to choose the version. No decryption happens, which is why this works here and not only on the local crypto plane. Returns { ok, name, restoredFrom, version } where `version` is the new head.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "env": {
            "description": "Environment slug or id within that application, as returned by list_envs (e.g. \"production\").",
            "type": "string"
          },
          "name": {
            "description": "The secret's name — the variable name it is injected as, e.g. \"DATABASE_URL\". Names come from list_secrets; this is never a value.",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          },
          "version": {
            "description": "The version number to restore, taken from list_secret_versions. Its ciphertext becomes a new version on top of history — the old version is not removed.",
            "exclusiveMinimum": 0,
            "maximum": 9007199254740991,
            "type": "integer"
          }
        },
        "required": [
          "app",
          "env",
          "name",
          "version"
        ],
        "type": "object"
      },
      "name": "restore_secret",
      "outputSchema": null
    },
    {
      "description": "Cancel a pending organization invitation before it is accepted. Use this for an invite sent in error; once someone has accepted, they are a member and this no longer applies. Find the id with list_invites. Returns { ok, inviteId }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "inviteId": {
            "description": "The pending invitation's id, from list_invites.",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "inviteId"
        ],
        "type": "object"
      },
      "name": "revoke_invite",
      "outputSchema": null
    },
    {
      "description": "Revoke a temporary-access lease now instead of waiting for it to expire — the leased database credential is dropped at the target immediately, so anything still holding it fails on its next connection. Irreversible: a new lease must be minted on the local crypto plane. Check list_leases first, since an already-expired lease needs no revoking. Returns { ok, leaseId }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "leaseId": {
            "description": "The lease's id from list_leases (not the target's id — see list_lease_targets).",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "leaseId"
        ],
        "type": "object"
      },
      "name": "revoke_lease",
      "outputSchema": null
    },
    {
      "description": "Revoke a service token by id. Future key fetches by that token stop immediately, so any workload still using it loses access on its next read. If the holder may have cached the key already, also rotate the environment on the local crypto plane — revocation alone does not re-encrypt anything. Find the id with list_tokens. Returns { ok, tokenId }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          },
          "tokenId": {
            "description": "The token's id from list_tokens — not the token string, which is never stored.",
            "type": "string"
          }
        },
        "required": [
          "tokenId"
        ],
        "type": "object"
      },
      "name": "revoke_token",
      "outputSchema": null
    },
    {
      "description": "Get the exact commands for running the local crypto plane (the `@seekrit/mcp` npm server, the `@seekrit/cli` CLI, seekrit-run, seekrit-proxy), including a copy-paste .mcp.json that reuses this session's credential. Takes no arguments and returns prose plus config. Call this the moment you need to SET or READ a secret value — no tool on this server will ever return one. Use local_tool_for instead when you want the single command for one named operation.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {},
        "type": "object"
      },
      "name": "setup_local_crypto",
      "outputSchema": null
    },
    {
      "description": "Create a seekrit workspace and your own machine credential — one call, no human, no browser. Binds the credential to this session, so every other tool works on your next call with no config change and no reconnect. Returns { org, credential: { clientId, clientSecret }, sessionBound, next }. Save the clientId + clientSecret: the secret is shown once, is not retrievable, and is how you reconnect later. Call this if a tool says you have no credential.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "clientName": {
            "description": "Optional label for this machine credential (defaults to <slug>-agent).",
            "type": "string"
          },
          "orgName": {
            "description": "The real project, product, or company this workspace is for (e.g. \"Acme Storefront\") — NOT a placeholder like \"test\" or \"agent\". A human will later claim the org by this name.",
            "maxLength": 120,
            "minLength": 1,
            "type": "string"
          },
          "orgSlug": {
            "description": "URL-safe identifier derived from the project, lowercase letters/numbers/hyphens (e.g. \"acme-storefront\"). Throwaway slugs make the org unmanageable.",
            "minLength": 1,
            "type": "string"
          }
        },
        "required": [
          "orgName",
          "orgSlug"
        ],
        "type": "object"
      },
      "name": "signup",
      "outputSchema": null
    },
    {
      "description": "Remove a composed group from an application environment. The group and its secrets are untouched — only the link is dropped — but the environment stops resolving every name it inherited from that group, which will break a workload still reading one. Check list_env_groups first, and use delete_group to destroy the group itself. Safe to repeat. Returns { ok: true }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {
          "app": {
            "description": "Application slug or id, as returned by list_apps (e.g. \"storefront\").",
            "type": "string"
          },
          "env": {
            "description": "Environment slug or id within that application, as returned by list_envs (e.g. \"production\").",
            "type": "string"
          },
          "group": {
            "description": "Shared-group slug or id, as returned by list_groups (e.g. \"shared-datastores\").",
            "type": "string"
          },
          "org": {
            "description": "Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs.",
            "type": "string"
          }
        },
        "required": [
          "app",
          "env",
          "group"
        ],
        "type": "object"
      },
      "name": "uncompose_group",
      "outputSchema": null
    },
    {
      "description": "Show the authenticated machine client and the org it can access. Call this first: it confirms the credential works and tells you which org slug to pass (or that you can omit `org` entirely). Returns { kind, clientId, orgs: [{ id, name, slug, role, createdAt }] }.",
      "inputSchema": {
        "$schema": "http://json-schema.org/draft-07/schema#",
        "properties": {},
        "type": "object"
      },
      "name": "whoami",
      "outputSchema": null
    }
  ]
}

Verify it yourself

curl -s https://api.teppi.xyz/v1/evidence/sha256:724b457344ae3880f4d7bf39e7b88b85766c4e8db8aff3e1eaa4693ce74b8307 | sha256sum