{"name":"io.github.fennecstudio/x-tkn-mcp","slug":"fennecstudio-x-tkn-mcp","title":null,"description":"Lets an AI agent hand a secret to a person as a one-time link, with no way to read it back.","url":"https://mcp.market/server/fennecstudio-x-tkn-mcp","rating":null,"grade":"C","score":55,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":12,"stars":null,"forks":null,"downloads_week":234,"last_push_at":null,"license":"ISC"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":null,"website":null,"version":"1.3.0","remotes":[],"packages":[{"registryType":"npm","identifier":"@fennecstudio/x-tkn-mcp","version":"1.3.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"Your X-TKN API key. Optional: without one, the first tool call starts a sandbox that lasts 24 hours, as does every secret it creates, and saves its key in $XDG_CONFIG_HOME/x-tkn/sandbox.json (~/.config/x-tkn/ by default) for the next start to reuse. Developer keys are free and stay: create one in the account console at x-tkn.com. Either this or X_TKN_API_KEY_ID is read, this one first.","format":"string","isSecret":true,"name":"X_TKN_API_KEY"},{"description":"Read when X_TKN_API_KEY is not set. Holds the same API key.","format":"string","isSecret":true,"name":"X_TKN_API_KEY_ID"}]}],"tools":[{"name":"check_status","description":"Whether a secret link is still waiting, has been opened, expired, or was revoked. Never returns the secret. Each call is one metered operation, and a sandbox has 100 in all, so call this no more often than every 30 seconds.","write_action":false,"price_micros":0,"input_schema":null},{"name":"claim_sandbox","description":"Get a one-time link a person opens to claim the sandbox this server's key belongs to, so the account outlives its 24 hours and keeps its secrets. Give the link only to the person who should keep it. It works once, for 30 minutes or until the sandbox ends if that is sooner, and calling this again voids the earlier link. The sandbox key itself still ends on schedule: a claimed account goes on with a","write_action":false,"price_micros":0,"input_schema":null},{"name":"create_secret","description":"Turn a secret (a password, API key, recovery code or private note) into a link a person opens once. The secret is encrypted on this machine before anything is sent, and X-TKN never holds the key. The link stops working once opened, or at its expiry. You cannot read the secret back afterwards: this server has no read tool. Returns the link and a code for check_status and revoke_secret. Up to 64 KB ","write_action":true,"price_micros":0,"input_schema":null},{"name":"revoke_secret","description":"Cancel a secret link so it can no longer be opened. Permanent, and immediate. A secret that was already opened stays opened: revoking cannot take it back from the recipient.","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":55,"grade":"C","scanned_at":"2026-10-25T09:23:17.752Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-25T09:23:17.737Z","components":{"code":{"score":25,"max":25,"notes":["2 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":3,"max":15,"notes":["no repository listed"]},"identity":{"score":2,"max":10,"notes":["no repository or website to verify"]}},"findings":[{"id":"maint.no-repo","severity":"low","component":"maintenance","title":"No source repository listed"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@fennecstudio/x-tkn-mcp","version":"1.3.0","found":true,"license":"ISC","hasInstallScripts":false,"dependencyCount":2,"publishedAt":"2026-10-22T15:53:08.699Z","weeklyDownloads":234}],"repo":{"found":false},"icon":{"url":null,"source":"none"},"presence":{"stars":null,"forks":null,"downloadsWeek":234,"license":"ISC","lastPushAt":null,"score":12}}}},"grade_history":[],"reviews":[]}