X Tkn MCP server
io.github.fennecstudio/x-tkn-mcp·v1.3.0Lets an AI agent hand a secret to a person as a one-time link, with no way to read it back.
234 downloads/wk
Reviews
Write oneNobody has reviewed X Tkn yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
X Tkn tools (4, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
check_statusWhether a secret link is still waiting, has been opened, expired, or was revoked. Never returns the secret. Each call is one metered operation, and a sandbox has 100 in all, so call this no more often than every 30 seconds.
claim_sandboxGet a one-time link a person opens to claim the sandbox this server's key belongs to, so the account outlives its 24 hours and keeps its secrets. Give the link only to the person who should keep it. It works once, for 30 minutes or until the sandbox ends if that is sooner, and calling this again voids the earlier link. The sandbox key itself still ends on schedule: a claimed account goes on with a
create_secretwrite actionTurn a secret (a password, API key, recovery code or private note) into a link a person opens once. The secret is encrypted on this machine before anything is sent, and X-TKN never holds the key. The link stops working once opened, or at its expiry. You cannot read the secret back afterwards: this server has no read tool. Returns the link and a code for check_status and revoke_secret. Up to 64 KB
revoke_secretwrite actionCancel a secret link so it can no longer be opened. Permanent, and immediate. A secret that was already opened stays opened: revoking cannot take it back from the recipient.
Public scan report
scanner v0.1.10 · 2026-10-25 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenanceno repository listed3/15
- Maintainer identityno repository or website to verify2/10
Findings (1)
- lowNo source repository listed
maint.no-repo
How X Tkn compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 55/100
- higher than 12% of 4,460 AI and agents servers
- Tools
- 4
- the typical AI and agents server has 6
- Tools that change things
- 50%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 234
- more than 76% of 1,538 AI and agents servers with a package
What its tools let an agent do: 2 read · 1 create · 1 delete
Install X Tkn in Claude Code, Cursor or VS Code
Runs npx -y @fennecstudio/x-tkn-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add x-tkn-mcp -- npx -y @fennecstudio/x-tkn-mcp
X Tkn: common questions
- Is X Tkn MCP server safe?
- With care: it is graded C, so read the findings first (55/100). Read the X Tkn safety report
- How do I install X Tkn?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does X Tkn need an API key?
- Yes. The registry entry asks for
X_TKN_API_KEY,X_TKN_API_KEY_ID. - Is X Tkn maintained?
- The latest release is v1.3.0.
- What can I use instead of X Tkn?
- Servers from other publishers that do the same job: Watch CLI MCP server.
- How does X Tkn compare with other AI and agents MCP servers?
- safety score 55/100 (higher than 12% of 4,460 AI and agents servers); tools 4 (the typical AI and agents server has 6); tools that change things 50% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to X Tkn
Same job from other publishers: the closest match first, then the best rated.
- Watch CLIHand any social video to your AI agent — frames + transcript bundled. MCP server for watch-cli.not reviewedEstablishedB