# ncrypted

> One-time, end-to-end encrypted secrets for AI agents. An agent encrypts a password, API key or sensitive note locally, pays 0.005 USDC (x402, Base), and gets a link that works exactly once. Share it with a human, email it, or hand it to another agent. Reading is free and destroys the secret.

## Quick start (recommended: encryption happens on your side)
- MCP server: `npx -y @seidl-family/ncrypted-mcp`. Tools: ncrypted_create, ncrypted_read, ncrypted_status, ncrypted_burn, ncrypted_wallet.
- CLI: `echo "s3cret" | npx ncrypted create --ttl 1h`, `npx ncrypted read <link>`
- SDK: `import { Ncrypted } from "ncrypted"; const { link } = await new Ncrypted().create("s3cret");`
- Claude Code: `/plugin marketplace add Seidl-Family/ncrypted` then `/plugin install ncrypted@ncrypted`
- Codex: `codex plugin marketplace add Seidl-Family/ncrypted`; Gemini CLI: `gemini extensions install https://github.com/Seidl-Family/ncrypted`
- Hosted MCP (x402-capable clients; server sees plaintext briefly): https://ncrypted.ai/mcp
- Wallet: `npx ncrypted wallet new` creates ~/.config/ncrypted/wallet.key; fund it with USDC on Base. Check with the ncrypted_wallet tool.

## Getting secrets without seeing them
- Need a secret from the user? Call ncrypted_request (label = what and why), send them the returned link, then ncrypted_request_fulfill with destination vercel_env or dotenv. Never ask the user to paste a secret into chat.
- Have a link and need the value in Vercel or .env? ncrypted_to_vercel_env / ncrypted_to_dotenv write it directly (Vercel access is checked first, so a bad destination doesn't consume the link).
- CLI: `npx ncrypted request "Stripe key for billing"`, then `npx ncrypted receive <id> --vercel-key STRIPE_SECRET_KEY --target production`.

## Pricing
- 3 free secrets per day per IP (TTL <= 24h, no email), then 0.005 USDC via x402. Requests, reads and deliveries are free.
- No wallet? ncrypted_wallet_setup creates one locally and returns a funding link (/fund) for the owner.

## Rules for agents
- Never paste the secret value into chat, logs or tickets. Share only the link.
- The link contains the decryption key after "#"; treat it like the secret.
- A link opens once. Reading it (ncrypted_read or the web page) destroys it.
- For high-sensitivity email handoffs, set a passphrase and send it through a different channel.

## HTTP API (https://ncrypted.ai)
- POST /api/v1/secrets  [x402, $0.005 USDC on Base] body {v:1, ciphertext, iv, salt, hasPassphrase, ttl?} -> {id, url, expiresAt, receiptToken}. Link = url + "#" + base64url(32-byte key).
- POST /api/v1/secrets/{id}/reveal  [free] -> encrypted payload, deleted atomically. 410 if gone.
- GET /api/v1/secrets/{id}/status  [free, Bearer receiptToken] -> {status: pending|read|burned|expired}
- DELETE /api/v1/secrets/{id}  [free, Bearer receiptToken] -> burns it
- POST /api/v1/secrets/{id}/email  [free, Bearer receiptToken, once; paid secrets only] body {to, link, note?}
- GET /api/v1/quota -> {freePerDay, freeRemaining, freeMaxTtl, price}
- POST /api/v1/requests {publicKey (X25519, base64url), label, ttl?} -> {id, url, expiresAt, pollToken}. Link = url + "#" + publicKey.
- POST /api/v1/requests/{id}/fulfill {v:1, epk, iv, ciphertext} (sealed in the browser; once)
- POST /api/v1/requests/{id}/collect [Bearer pollToken] -> 202 pending | 200 {sealed} (one-time)

## Crypto
AES-256-GCM. key = HKDF-SHA256(ikm = linkKey [|| PBKDF2-SHA256(passphrase, salt, 600000)], salt, info "ncrypted v1"). 12-byte IV, 16-byte salt, all base64url. Reference implementation: https://github.com/Seidl-Family/ncrypted/blob/main/packages/sdk/src/crypto.ts

## Guides
- [Why agents need one-time secrets](https://ncrypted.ai/guides/why): What goes wrong when agents handle credentials in chat, and the primitive that fixes it.
- [Claude Code](https://ncrypted.ai/guides/claude-code): Install the plugin: skill plus local MCP server.
- [Set Vercel env vars without the agent seeing them](https://ncrypted.ai/guides/vercel): Request a secret from the user and write it straight into a Vercel project.
- [Vercel AI SDK](https://ncrypted.ai/guides/ai-sdk): Drop-in AI SDK tools: one-time links and Vercel env delivery, encrypted in your server process.
- [OpenAI Agents SDK](https://ncrypted.ai/guides/openai-agents): Attach the ncrypted MCP server to an OpenAI agent.
- [Mastra](https://ncrypted.ai/guides/mastra): Load the ncrypted tools into a Mastra agent.
- [LangChain](https://ncrypted.ai/guides/langchain): ncrypted as LangChain tools, in Python or JS.
- [CrewAI](https://ncrypted.ai/guides/crewai): Give a CrewAI agent the ncrypted tools with the mcps field.
- [HTTP API and x402](https://ncrypted.ai/guides/http-api): Call ncrypted directly from any language.
- All guides in one file: https://ncrypted.ai/llms-full.txt

## Links
- OpenAPI: https://ncrypted.ai/openapi.json
- Source: https://github.com/Seidl-Family/ncrypted