unntak-mcp

# unntak-mcp <!-- mcp-name: io.github.l0jk/unntak-mcp --> local MCP server for the [unntak.no](https://unntak.no) agent API at `https://app.unntak.no`. it lets an MCP client read, create, time, comment on, and complete tasks inside an agent's tag scope. all supported accounts are end-to-end encrypted. encrypted task content is decrypted only inside this local process. unntak.no receives the inner scoped API credential and ciphertext; the master key from the combined token is never sent to the server. ## setup 1. in [app.unntak.no](https://app.unntak.no), open `:)` → settings → agents and create an agent token. copy the complete token once. encrypted tokens start with `unntak-agent-v2.`. 2. add the local server to your MCP client: ```bash read -s "UNNTAK_TOKEN?Agent token: " echo claude mcp add --scope user unntak \ -e UNNTAK_TOKEN="$UNNTAK_TOKEN" \ -- uvx unntak-mcp unset UNNTAK_TOKEN ``` for a local Unntak instance, also add `-e UNNTAK_URL=http://localhost:8000` before `--`. the complete token is a password and, for encrypted accounts, also contains the key needed to read the agent's task content. never commit it, paste it into issues, or include it in logs. revoke it in Unntak settings if it is exposed. only combined `unntak-agent-v2.` tokens are accepted. ## upgrade an existing installation `uvx` installs published versions on demand. force it to refresh the cached package, then verify the token and E2EE decryption: ```bash read -s "UNNTAK_TOKEN?Agent token: " echo export UNNTAK_TOKEN uvx --refresh-package unntak-mcp unntak-mcp --check unset UNNTAK_TOKEN ``` restart the MCP client afterwards. to replace a revoked token: ```bash read -s "UNNTAK_TOKEN?New agent token: " echo claude mcp remove --scope user unntak claude mcp add --scope user unntak \ -e UNNTAK_TOKEN="$UNNTAK_TOKEN" \ -- uvx unntak-mcp unset UNNTAK_TOKEN ``` then confirm the connection: ```bash claude mcp list ``` ## connection check the check is read-only. success pri…