Sirr MCP server — lets Claude Code read and write ephemeral secrets
概览
Gives AI assistants like Claude direct access to your Sirr secret vault. Store, read, and share ephemeral secrets without leaving a conversation. The secret existed just long enough to be used. The vault enforces expiry server-side. Claude is instructed by the tool description not to memorize or repeat the value. Even if a different agent, session, or attacker asks — there is nothing left to return. Both methods work with Claude Code, Cursor, Windsurf, and any MCP client. Works immediately. No account, no token, no org needed: 1. at sirrlock.com — free tier includes 3 seats and unlimited secrets. 2. from the dashboard (Settings → API Keys). 3. — paste the config block below with your key and org ID. 4. — run sirr-mcp --health to confirm the connection. 1. — run sirrd serve and note the SIRR_MASTER_API_KEY you set. 2. — SIRR_TOKEN in your MCP config must equal that key value. 3. — use the self-hosted config block below. 4. — run sirr-mcp --health to confirm the connection.
README
以下为原文 README 节选，完整内容请查看原文。
@sirrlock/mcp — Sirr MCP Server
Gives AI assistants like Claude direct access to your Sirr secret vault. Store, read, and share ephemeral secrets without leaving a conversation.
Demo
Anonymous dead drop — store and burn
Session 1 — store a secret (no name, no org needed)
❯ stash this deploy token: 123asdzxc
⏺ sirr-mcp - store_secret (MCP)(value: "123asdzxc")
⎿ Secret pushed.
ID: a1b2c3d4e5f6…
URL: https://sirr.sirrlock.com/s/a1b2c3d4e5f6…
Burns after 1 read(s).
⏺ Stored. Share the URL — it burns after one read.
Session 2 — retrieve by ID (the vault burns it)
❯ get the secret at a1b2c3d4e5f6…
⏺ sirr-mcp - read_secret (MCP)(id: "a1b2c3d4e5f6…")
⎿ 123asdzxc
⏺ Got it. Deploying to staging with the token. Done.
Session 3 — secret is already gone
❯ get that secret again
⏺ sirr-mcp - read_secret (MCP)(id: "a1b2c3d4e5f6…")
⎿ Secret not found, expired, or already burned.
⏺ The secret no longer exists on the server.
Org-scoped named secret — store and read by name
❯ store the BITBUCKET_TOKEN as 123asdzxc
⏺ sirr-mcp - store_secret (MCP)(value: "123asdzxc", name: "BITBUCKET_TOKEN")
⎿ Secret 'BITBUCKET_TOKEN' stored in org 'acme'.
❯ deploy to staging using sirr:BITBUCKET_TOKEN
⏺ sirr-mcp - read_secret (MCP)(name: "BITBUCKET_TOKEN")
⎿ 123asdzxc
The secret existed just long enough to be used. The vault enforces expiry server-side. Claude is instructed by the tool description not to memorize or repeat the value. Even if a different agent, session, or attacker asks — there is nothing left to return.
Install
One-liner for Claude Code:
claude mcp add --transport stdio sirr -- npx -y @sirrlock/mcp
Or install globally:
npm install -g @sirrlock/mcp
Both methods work with Claude Code, Cursor, Windsurf, and any MCP client.
Quick start
Zero config (public dead drops + share links)
Works immediately. No account, no token, no org needed:
❯ stash this API key: sk-abc123
⏺ [calls store_secret] → burn URL
❯ share this password with the contractor: hunter2安装
npx -y @sirrlock/mcp配置
{
"mcpServers": {
"sirr": {
"command": "npx",
"args": ["-y", "@sirrlock/mcp"],
"env": {
"SIRR_TOKEN": "your-principal-key",
"SIRR_ORG": "your-org-id"
}
}
}
}