MCP.Market

Sealed MCP server

by edwardyen724-g·io.github.edwardyen724-g/sealed·v0.1.0

Per-call paid skills for AI agents, run server-side: inputs in, outputs back. The body never ships.

B78/100grade B
What users say
No reviews yet
Be the first
Safety scan
B78/100

full report

Adoption
New

0 stars45 downloads/wk

Reviews

Write one

Nobody has reviewed Sealed yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Sealed tools (2, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • list_skills

    List the public Sealed skill catalog (name, description, inputSchema, price per call). Returns metadata only — never the skill body.

  • run_skillwrite action

    Run a Sealed skill server-side and return ONLY its output plus price/mode meta. The skill source never leaves the cloud. Each call spends wallet balance at the listed per-call price.

Public scan report

scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 84 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Sealed compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
78/100
higher than 57% of 48,255 servers
Tools
2
the typical server has 7
Tools that change things
50%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
45
more than 37% of 12,191 servers with a package

What its tools let an agent do: 1 read · 1 run or deploy

Install Sealed in Claude Code, Cursor or VS Code

Runs npx -y sealed-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add sealed -- npx -y sealed-mcp
Add to Cursor

What the publisher says

From the Sealed repository's README, as published. We do not edit it. Read it on GitHub

sealed-mcp

Thin MCP stdio client for Sealed — the skill marketplace where your skill runs sealed.

This package is a pure proxy. It connects your MCP-capable agent to a remote Sealed server and exposes two tools:

Skill bodies never reach this process. Skills execute on Sealed's infrastructure; this client only carries your inputs up and the output back. There is no local execution mode — SEALEDAPIURL is required.

Zero runtime dependencies. Plain Node 18+ (uses the global fetch).

npm naming: this package targets the unscoped name sealed-mcp and carries mcpName: io.github.edwardyen724-g/sealed for the official MCP registry. If that npm name is unavailable at publish time, the fallbacks are the scoped names @sealed/mcp or @sealedrun/mcp — update package.json, registry drafts, and install snippets together.

Install / configure

Claude Code

claude mcp add sealed --env SEALED_API_URL=https://sealed.run --env SEALED_API_KEY=sealed_sk_… -- npx -y sealed-mcp

Cursor / Windsurf

Add to ~/.cursor/mcp.json (Cursor) or ~/.codeium/windsurf/mcp_config.json (Windsurf):

{
  "mcpServers": {
    "sealed": {
      "command": "npx",
      "args": ["-y", "sealed-mcp"],
      "env": {
        "SEALED_API_URL": "https://sealed.run",
        "SEALED_API_KEY": "sealed_sk_…"
      }
    }
  }
}

Generic stdio MCP client

Spawn the binary and speak newline-delimited JSON-RPC 2.0 over stdin/stdout (initialize, tools/list, tools/call):

SEALED_API_URL=https://sealed.run SEALED_API_KEY=sealed_sk_… npx -y sealed-mcp

Environment variables

Errors you may see

Fixed, non-leaking error strings: unauthorized (bad/missing key), insufficient funds (top up your wallet), output blocked by leak gate, unknown skill: , cannot reach the Sealed API. Server error bodies are never echoed.

Links

  • Website: https://sealed.run
  • Get an API key: sign up at your Sealed server's /signup endpoint (production emails you a single-use sign-in link that shows the key once)

Nothing above is checked by us. What we check is on the safety report.

Sealed: common questions

Is Sealed MCP server safe?
Mostly: it is graded B (78/100). Read the Sealed safety report
How do I install Sealed?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Sealed need an API key?
Yes. The registry entry asks for SEALED_API_KEY.
Is Sealed maintained?
The last commit was 85 days ago (2026-08-11). The latest release is v0.1.0.
What can I use instead of Sealed?
Servers from other publishers that do the same job: Ouroboros MCP server.
How does Sealed compare with other MCP servers?
safety score 78/100 (higher than 57% of 48,255 servers); tools 2 (the typical server has 7); tools that change things 50% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Sealed

Same job from other publishers: the closest match first, then the best rated.

  • Ouroboros
    Pins an acceptance spec; the verify command and expected output never enter the success contract.
    C