MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
MCP server for SQLCipher 4 encrypted SQLite databases - Full CRUD operations via Model Context Protocol
Apache-2.0 -
MCP server for creating and managing SOPS-encrypted secret files using age encryption.
NOASSERTION -
MCP server for Standard Notes with end-to-end encryption (protocol 004). Read/write notes from Claude while keeping E2EE intact.
MIT ★ 13 -
justdrop-mcpgithub.com/managed-digital-llc/justdrop-mcpupdated this year
MCP server for JustDrop — live, end-to-end encrypted, ephemeral file transfer between your AI agent and any device. No accounts, nothing stored.
npm MIT -
Command-line and MCP access to NMTS (NeedMoreTruthStorage, https://nmts.me): open-source, end-to-end encrypted storage on the Walrus network. No fee to NMTS; you pay the network from your own wallet. For people and for their agents.
npm Apache-2.0 -
fpe-demo-mcpgithub.com/Horizon-Digital-Engineering/fpe-demo-mcpupdated this year
Lightweight MCP server demonstrating FF3 Format Preserving Encryption with multi-mode authentication. Shows how LLMs can securely encrypt/decrypt sensitive data while preserving format. Supports stdio and HTTP transports.
NOASSERTION ★ 1 -
The Armadoc CLI and local MCP server for end-to-end encrypted document sharing
npm -
✉️ Unofficial, pure-Rust Proton Mail client — library, CLI, and MCP server with end-to-end OpenPGP encryption.
MIT ★ 5 -
Encrypted, sovereign agent-to-agent messaging — an MCP server for xete
MIT -
MCP server for a privacy-first agent memory vault: memories are encrypted on the client before they reach the server.
pypi MIT -
Encrypted secrets management MCP server for AI agents — AES-128 Fernet vault, access policies, audit trails, key rotation.
MIT -
vaultcrypt-mcpgithub.com/AlexeySamosadov/vaultcrypt-mcpupdated this year
MCP server giving AI agents local AES-256-GCM file encryption — encrypt/decrypt & passphrase gen (free), plus folder encrypt/decrypt (Pro). Keys & files never leave the machine.
NOASSERTION -
Local MCP server and CLI for Armadoc. Lets your AI agent send and read end-to-end encrypted documents; your private key and plaintext never leave your machine.
npm -
Free-to-start portable memory for AI agents: encrypted, shareable, provably erased. Join SAIHM. Ask your agent to "Join SAIHM".
npm Apache-2.0 -
@specscreen/keyletter-mcpactive
Create encrypted, one-time password and API-key shares from AI agents. Local encryption, free guest sharing, no account required.
npm SEE LICENSE IN LICENSE -
Create encrypted, one-time password and API-key shares from AI agents. Local encryption, free guest sharing, no account required.
npm SEE LICENSE IN LICENSE -
MCP server for xete — encrypted agent-to-agent messaging on Solana. Gives any MCP-enabled agent a sovereign identity and an end-to-end-encrypted inbox.
pypi MIT -
MCP server, CLI and Node.js module for write-only, age-encrypted credential deposits into self-hosted Vaultwarden (Bitwarden-compatible). AI agents (Claude Code, Codex) and deployment scripts save new passwords and secure notes without vault read access.
Apache-2.0 -
End-to-end encrypted file sharing with links that expire. View-only, works-once and passcode links, file requests, teams, open receipts and watermarks, with no tracking. Website, desktop app (Windows, macOS, Linux), self-hosting and an MCP server for AI assistants.
npm MIT -
evergistactive
Share end-to-end encrypted, self-destructing text from the terminal or any MCP client. Encryption happens locally; evergist.com only stores ciphertext.
npm MIT -
sylex-memorygithub.com/MastadoonPrime/sylex-memoryupdated this year
Persistent encrypted memory service for AI agents — MCP server with E2E encrypted private vaults, shared knowledge commons, community channels, and 23 tools. Free, open source.
-
MCP server for encrypted, persistent agent memory: facts are embedded and encrypted on the client, so the server stores only ciphertext and vectors.
MIT -
NMTS (NeedMoreTruthStorage · nmts.me) — Command-line and MCP access to NMTS: open-source, end-to-end encrypted storage on the Walrus network. NMTS charges no fee; you pay the network from your own wallet. For people at a terminal and for the agents they run.
npm Apache-2.0 ★ 1 -
pipepiegithub.com/pipepie/pipepieupdated this year
Self-hosted encrypted tunnel for webhooks, AI pipelines, and local development. End-to-end Noise encryption, pipeline tracing, web dashboard, MCP server for AI tools.
AGPL-3.0 ★ 8 -
Encrypted credential vault for Node with an MCP server for agents
MIT ★ 1 -
MCP server for creating and managing SOPS-encrypted secrets
pypi Apache-2.0 -
A lightweight MCP server for encrypted memory management with Claude
npm AGPL-3.0-or-later -
Model Context Protocol (MCP) server that gives AI assistants and agents cryptography tools: key generation, encryption, ML-KEM, ML-DSA signing, hashing, streaming encryption, KMS and CBOM.
npm MIT OR Apache-2.0 -
katlagithub.com/wilhelmsson424-jpg/katlaupdated this year
Local encrypted credential vault for AI agents — Argon2id + Fernet + Telegram 2FA + MCP
MIT -
Local-first encrypted memory for AI agents
Apache-2.0 ★ 4 -
An end-to-end encrypted channel between coding agents, anywhere
MIT ★ 59 -
Encrypted secrets vault for developers, with memory and AI access without exposing values
Apache-2.0 -
mcp-payment-managergithub.com/artik0din/mcp-payment-managerupdated this year
💳 Payment Manager MCP Server - Enterprise-grade encrypted card storage and multi-chain crypto wallet management
MIT -
@facets-cloud/madalactive
Publish HTML and Markdown to end-to-end encrypted links. Includes the madal MCP server: npx -y @facets-cloud/madal mcp
npm SEE LICENSE IN LICENSE -
End-to-end encrypted · Zero-knowledge · 100% in your terminal
MIT -
Privacy-first WhatsApp MCP server: per-chat consent, encryption at rest, read-only by default, approval for every send.
MIT -
Give an AI a room in your encrypted Terebyte vault: it sees that room and nothing else.
Apache-2.0 -
Timelock encryption for apps and AI agents. Seal anything until a date, nobody can open it early. SDK + MCP server.
MIT -
@arelay/cligithub.com/mmmikael/arelayupdated this year
CLI, SDK, and MCP server for delivering end-to-end encrypted files from AI agents to an Agent Relay inbox.
npm MIT -
MCP Server for Payment Management - Secure card storage and crypto wallet management with encryption
npm MIT -
Compartment - high-security, fully offline, encrypted vector memory for AI agents (MCP)
pypi Apache-2.0 -
IMAP-mcpgithub.com/newlc/IMAP-mcpupdated this year
MCP server for IMAP email with encrypted local cache — offline analysis, 300K+ mailbox support, secure keyring credentials
MIT ★ 1 -
myceliumgithub.com/yoda-digital/myceliumupdated this year
End-to-end encrypted messaging between Claude Code instances. Curve25519 PFS, Ed25519 TOFU, replay protection.
MIT -
mcp-standardnotesgithub.com/lozit/mcp-standardnotesupdated this year
MCP server giving Claude end-to-end encrypted access to a Standard Notes vault (protocol 004, local stdio only)
npm MIT -
agentanycast-mcpgithub.com/agentanycast/agentanycast-mcpupdated this year
MCP server for P2P agent networking — discover and talk to AI agents anywhere, encrypted, zero config
pypi Apache-2.0 -
icontextgithub.com/floomhq/icontextupdated this year
Encrypted AI context vault: give Claude Code, Codex, and Cursor persistent memory from Gmail + LinkedIn
MIT ★ 1 -
MCP server for Obsideo: encrypted S3-compatible storage with cryptographic possession proofs. 12 GB free, self-serve signup, runs on your machine.
NOASSERTION -
agentanycast-mcpgithub.com/AgentAnycast/agentanycast-mcpupdated this year
MCP server for P2P agent networking — discover and talk to AI agents anywhere, encrypted, zero config
Apache-2.0 -
Zero-knowledge persistent memory layer for Claude — AES-256-GCM encrypted, semantic search, EU hosted. MCP server for Claude Desktop.
MIT ★ 1 -
A local, encrypted knowledge graph for your Mac, and a shared memory for your AI tools over MCP.
MIT ★ 1 -
🔐 The password manager for terminal users and AI agents. Age-encrypted, keyring-cached, MCP-ready. Zero telemetry.
Apache-2.0 ★ 34 -
Local MCP server for cleaning up an end-to-end-encrypted Standard Notes vault behind a privacy wall
MIT -
End-to-end encrypted inbox for AI agents — deliver artifacts to humans via HTTP API.
MIT ★ 10 -
cligithub.com/paironce/cliactive
paironce: send files and text from a terminal or an AI agent (MCP) to your own devices through PairOnce, end-to-end encrypted (Apache-2.0)
npm Apache-2.0 -
Askew local connector — MCP server that lets any AI agent run Shortcuts on your iPhone, iPad or Mac (end-to-end encrypted relay)
MIT ★ 2 -
@yoda.digital/myceliumgithub.com/yoda-digital/myceliumupdated this year
End-to-end encrypted messaging between Claude Code instances. Curve25519 PFS, Ed25519 TOFU, offline identity envelopes, automatic retransmission, replay protection, zero-plaintext relay.
npm MIT -
Your vault is what your agents should know about you, shared by every agent you connect. End-to-end encrypted. Local MCP bridge to Decoy.
MIT -
Local vault for personal context. One encrypted record on this device; each paired agent gets a single context contract. MCP, loopback only.
MIT ★ 1 -
MCP server that lets a coding agent (Claude Code, Codex) send files and notes into your Zas channels. Keys stay on your machine; content is encrypted before it leaves.
npm MIT -
silkgithub.com/21J3phy/silkactive
Consent-gated, end-to-end encrypted messaging between AI agents, over MCP. Post-quantum handshake, public transparency ledger, proof-of-work spam protection.
Apache-2.0 ★ 1