MCP.Market

ZKshare MCP server

by sp0oby·io.github.sp0oby/zkshare·v1.0.1
No reviews yet

ZKshare stdio MCP: store/prove/share, semantic search, sandbox proxy to HTTPS /api/v1/context.

B72/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
New

0 stars31 downloads/wk

Reviews

Write one

Nobody has reviewed ZKshare yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

ZKshare tools (6, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • zkshare_prove

    Produce a yes/no answer and signed proof envelope for a stored server-sealed fact.

  • zkshare_sandboxwrite action

    Run an allow-listed sandbox action (e.g. calculate_travel_budget, calculate_budget, analyze_spending).

  • zkshare_search

    Semantic search over stored server-sealed facts for this API key.

  • zkshare_share

    Like prove, plus issue a time-bound share token for a recipient agent id.

  • zkshare_store

    Encrypt and store a fact (server-sealed). Same as REST operation store with value.

  • zkshare_verify_proof

    Verify a zkshare proof envelope (from prove/share) without reading fact plaintext.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan5 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 151 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How ZKshare compares

Against every graded E-commerce MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 45% of 2,174 E-commerce servers
Tools
6
the typical E-commerce server has 6
Tools that change things
17%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
31
more than 23% of 411 E-commerce servers with a package

What its tools let an agent do: 5 read · 1 change

Install ZKshare in Claude Code, Cursor or VS Code

Runs npx -y zkshare-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add zkshare -- npx -y zkshare-mcp
Add to Cursor

What the publisher says

From the ZKshare repository's README, as published. We do not edit it. Read it on GitHub

zkShare

Privacy-oriented context API for users, AI agents, and back-office systems. A single HTTP entrypoint (POST /api/v1/context) handles encrypted fact storage, commitment-based proof envelopes, semantic search over encrypted data, end-to-end-encrypted (client-sealed) facts, and a isolated sandbox execution for sensitive computations. The implementation is a Next.js (App Router) application backed by PostgreSQL with pgvector.

This document is for developers integrating against the API and operators self-hosting the service. It is not a marketing brochure — pricing tiers, dashboards, and billing are optional layers defined separately in the application code.

Privacy and security model

The platform is designed around three trust boundaries:

What this means in practice

a third party without exposing the underlying value. The third party verifies the envelope through verify_proof.

  • Users can prove a property of a personal fact (for example, "the user prefers beach trips") to

raw values to downstream systems. Sharing produces a single-use, time-bound share_token bound to a recipient agent identifier.

  • Agents can hold and exchange context across sessions or tool boundaries without surfacing the

contractual — RLS denies direct table access, the encryption key is server-only, the proof HMAC secret is server-only, and the client-sealed path lets sensitive data stay outside the operator's reach entirely.

  • Businesses integrating the API can offer privacy guarantees that are technical, not

SECURITY.md is the canonical reference for the threat model, the trust model summary, vulnerability disclosure, the operator checklist, and third-party LLM exposure controls.

API contract

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

ZKshare: common questions

Is ZKshare MCP server safe?
Mostly: it is graded B (72/100). Read the ZKshare safety report
How do I install ZKshare?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does ZKshare need an API key?
Yes. The registry entry asks for ZKSHARE_API_KEY.
Is ZKshare maintained?
The last commit was 189 days ago (2026-04-30). The latest release is v1.0.1.
What can I use instead of ZKshare?
Servers from other publishers that do the same job: Vectros AI MCP server, Loki Mode MCP server and Apify MCP server.
How does ZKshare compare with other E-commerce MCP servers?
safety score 72/100 (higher than 45% of 2,174 E-commerce servers); tools 6 (the typical E-commerce server has 6); tools that change things 17% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to ZKshare

Same job from other publishers: the closest match first, then the best rated.

  • Vectros AI
    Typed record store + hybrid search over MCP: deterministic lookups + semantic memory, per-customer.
    B
  • Loki Mode
    Autonomous spec-to-product coding-agent CLI with an MCP server exposing 39 tools over stdio.
    B
  • Apify
    Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡
    A
  • Mneme Memory
    Cross-session memory for AI coding agents via six tools; local-first SQLite store.
    A
  • Heimdall
    Every App Store Connect + StoreKit 2 endpoint. 929 tools in 13 profiles, narrow to 27.
    B