X Tkn MCP server
io.github.x-tkn/x-tkn-mcp·v1.0.1Lets an AI agent hand a secret to a person as a one-time link, with no way to read it back.
420 downloads/wk
Reviews
Write oneNobody has reviewed X Tkn yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
X Tkn tools (3, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
check_statusWhether a secret link is still waiting, has been opened, expired, or was revoked. Never returns the secret.
create_secretwrite actionTurn a secret (a password, API key, recovery code or private note) into a link a person opens once. The secret is encrypted on this machine before anything is sent, and X-TKN never holds the key. The link stops working once opened, or at its expiry. You cannot read the secret back afterwards: this server has no read tool. Returns the link and a code for check_status and revoke_secret. Up to 64 KB
revoke_secretwrite actionCancel a secret link so it can no longer be opened. Permanent, and immediate. A secret that was already opened stays opened: revoking cannot take it back from the recipient.
Public scan report
scanner v0.1.10 · 2026-10-12 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenanceno repository listed3/15
- Maintainer identityno repository or website to verify2/10
Findings (1)
- lowNo source repository listed
maint.no-repo
How X Tkn compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 55/100
- higher than 12% of 4,460 AI and agents servers
- Tools
- 3
- the typical AI and agents server has 6
- Tools that change things
- 67%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 420
- more than 84% of 1,538 AI and agents servers with a package
What its tools let an agent do: 1 read · 1 create · 1 delete
Install X Tkn in Claude Code, Cursor or VS Code
Runs npx -y @x-tkn/mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add x-tkn-mcp -- npx -y @x-tkn/mcp
X Tkn: common questions
- Is X Tkn MCP server safe?
- With care: it is graded C, so read the findings first (55/100). Read the X Tkn safety report
- How do I install X Tkn?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does X Tkn need an API key?
- Yes. The registry entry asks for
X_TKN_API_KEY,X_TKN_API_KEY_ID. - Is X Tkn maintained?
- The latest release is v1.0.1.
- What can I use instead of X Tkn?
- Servers from other publishers that do the same job: Watch CLI MCP server.
- How does X Tkn compare with other AI and agents MCP servers?
- safety score 55/100 (higher than 12% of 4,460 AI and agents servers); tools 3 (the typical AI and agents server has 6); tools that change things 67% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to X Tkn
Same job from other publishers: the closest match first, then the best rated.
- Watch CLIHand any social video to your AI agent — frames + transcript bundled. MCP server for watch-cli.not reviewedEstablishedB