{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_hqv88g6nqsnm","handle":"ciphra-mcp","url":"https://wellknown.network/agents/ciphra-mcp","links":{"self":"https://wellknown.network/agents/ciphra-mcp/record.json","html":"https://wellknown.network/agents/ciphra-mcp","markdown":"https://wellknown.network/agents/ciphra-mcp/record.md","api":"https://wellknown.network/api/v1/agents/ciphra-mcp","status":"https://wellknown.network/api/v1/agents/ciphra-mcp/status","claim":"https://wellknown.network/agents/ciphra-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/ciphra-mcp/claim.json","badge":"https://wellknown.network/agents/ciphra-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:ciphra-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"ciphra-mcp","summary":"Python MCP server for Ciphra. Lets AI coding agents call Ciphra's secret scanner via the Model Context Protocol.","description":"# ciphra-mcp\n\nPython MCP server exposing Ciphra's secret scanner to AI agents.\n\n## What this is\n\nThe agent-facing layer for [Ciphra](../README.md). The actual scanning is done by the TypeScript CLI at the repo root; this Python project spawns the CLI as a subprocess and translates between MCP's JSON-RPC protocol and Ciphra's JSON output. With this server registered, agents like Claude Code and Cursor can scan a codebase, validate a key, or audit git history without the user typing CLI commands.\n\n## Prerequisites\n\n- **Node 20+** — needed for the underlying `ciphra` CLI, which this MCP server shells out to\n- **Python 3.11+** — for the MCP server itself\n- **[uv](https://github.com/astral-sh/uv)** (recommended) or `pip + venv`\n- **`ciphra` on `$PATH`.** The MCP server resolves the CLI via `shutil.which(\"ciphra\")`, so it must be installed globally:\n\n  ```bash\n  npm install -g ciphra\n  ```\n\n  If you get an `EACCES` error on `npm install -g`, your npm prefix is root-owned. The cleanest fix:\n\n  ```bash\n  mkdir -p ~/.npm-global\n  npm config set prefix ~/.npm-global\n  echo 'export PATH=~/.npm-global/bin:$PATH' >> ~/.zshrc\n  source ~/.zshrc\n  npm install -g ciphra\n  ```\n\n## Installation\n\n```bash\nuvx ciphra-mcp                    # ephemeral; runs the published wheel on demand\n```\n\nThat's it — `uvx` downloads the wheel from PyPI on first invocation, then runs the entry point. No clone required.\n\nIf you'd rather have it permanently installed in a project-local venv:\n\n```bash\nuv pip install ciphra-mcp\n```\n\n### Building from source (contributors)\n\n```bash\ncd /path/to/ciphra\nnpm install && npm run build      # build the TS CLI\n\ncd mcp-server\nuv sync --extra dev               # creates .venv, installs deps\n```\n\n(pip alternative: `python3.11 -m venv .venv && source .venv/bin/activate && pip install -e \".[dev]\"`)\n\n## Running the server\n\n**Standalone (sanity check that it launches):**\n\n```bash\nuv run ciphra-mcp\n```\n\nThe server speaks MCP over stdio and isn't useful interactively. Send…","publisher":{"name":"Sanjay Selvam","url":null},"homepage":"https://github.com/sanjayselvam31/ciphra","repository":"https://github.com/sanjayselvam31/ciphra","version":"0.1.0","license":null,"protocols":["mcp"],"tags":["ai-agents","ciphra","mcp","scanner","secrets","security"],"pricing":null,"endpoints":[{"url":"pypi:ciphra-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"security.scanning","name":"Security Scanning","confidence":1,"provenance":"declared"},{"slug":"security.secrets","name":"Secrets Management","confidence":1,"provenance":"declared"},{"slug":"dev.version-control","name":"Version Control","confidence":0.745,"provenance":"derived"},{"slug":"dev.terminal","name":"Terminal & Shell","confidence":0.745,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.722,"provenance":"derived"}],"categories":["dev","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"ciphra-mcp","registry":"pypi","observedAt":"2026-09-09T11:34:42.733Z","publishedAt":"2026-05-16T04:21:46.395546Z","latestVersion":"0.1.0"}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"ciphra-mcp","url":"https://pypi.org/project/ciphra-mcp/","firstSeenAt":"2026-09-09T11:30:37.889Z","fetchedAt":"2026-09-09T11:30:37.889Z","normalizedAt":"2026-09-09T11:30:37.889Z"}]},"firstSeenAt":"2026-09-09T11:30:37.889Z","updatedAt":"2026-09-09T11:34:42.733Z"}