@seekrit/mcp 0.1.0 → 0.3.0

package/README.md

@@ -43,6 +43,34 @@ Or drop a `.mcp.json` in your project — the whole setup is this snippet:
 
 Requires Node ≥ 20. Set `SEEKRIT_API_URL` too if you're not on the hosted API.
 
+## As a container
+
+For a sandbox with no Node toolchain, the same server ships as a multi-arch
+Docker image, [`seekritdev/mcp`](https://hub.docker.com/r/seekritdev/mcp).
+Register a stdio server that runs `docker run -i` — the `-i` is required, since
+stdin is the MCP transport:
+
+```json
+{
+  "mcpServers": {
+    "seekrit": {
+      "command": "docker",
+      "args": [
+        "run", "-i", "--rm",
+        "-e", "SEEKRIT_TOKEN",
+        "-v", "${PWD}:/work",
+        "seekritdev/mcp"
+      ]
+    }
+  }
+}
+```
+
+The bare `-e SEEKRIT_TOKEN` forwards the token from the client's environment.
+Mount a workdir at `/work` for the `run_command` tool to operate on (it runs
+*inside* the container). Pin a release (`seekritdev/mcp:0.2.0`) or track `:edge`.
+The container still decrypts locally — nothing plaintext leaves it.
+
 ## Choosing the credential
 
 The server authenticates exactly like the CLI — `SEEKRIT_TOKEN`, or saved

package/dist/index.js

@@ -664,7 +664,7 @@ function isServiceToken(value) {
 }
 //#endregion
 //#region ../cli/package.json
-var version$1 = "0.18.0";
+var version$1 = "0.19.0";
 const PROJECT_FILE = "seekrit.json";
 function globalConfigPath() {
 	return join(process.env.XDG_CONFIG_HOME ?? join(homedir(), ".config"), "seekrit", "config.json");
@@ -2221,7 +2221,7 @@ async function runMcpServer(options = {}) {
 * `seekrit mcp`. tsdown bundles the shared server source in at build time, so the
 * published package is self-contained and needs no `@seekrit/cli` install.
 */
-runMcpServer({ version: "0.1.0" }).catch((err) => {
+runMcpServer({ version: "0.3.0" }).catch((err) => {
 	const message = err instanceof Error ? err.message : String(err);
 	process.stderr.write(`seekrit-mcp: fatal: ${message}\n`);
 	process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seekrit/mcp",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "npx-able MCP server for seekrit — let Claude Code and other MCP clients provision, manage, and inject end-to-end encrypted secrets.",
   "type": "module",
   "publishConfig": {
@@ -15,18 +15,18 @@
   "engines": {
     "node": ">=20"
   },
-  "scripts": {
-    "build": "tsdown",
-    "dev": "tsdown --watch",
-    "typecheck": "tsc --noEmit"
-  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@seekrit/cli": "workspace:*",
     "@types/node": "^26.1.0",
-    "tsdown": "^0.22.3"
+    "tsdown": "^0.22.3",
+    "@seekrit/cli": "0.19.0"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "dev": "tsdown --watch",
+    "typecheck": "tsc --noEmit"
   }
-}
+}