Privacy-oriented context API for users, AI agents, and back-office systems. A single HTTP entrypoint (`POST /api/v1/context`) handles **encrypted
Privacy-oriented context API for users, AI agents, and back-office systems. A single HTTP entrypoint (POST /api/v1/context) handles encrypted fact storage
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| store | **Server-sealed:** caller sends value. Server encrypts with AES-256-GCM, computes a salted commitment, generates an embedding (or accepts a 1536-dim embedding), and persists with client_encrypted = false. **Client-sealed |
| prove | Loads a server-sealed fact, decrypts in memory, derives a yes/no answer for the supplied query (LLM with temperature: 0, or a heuristic when external LLMs are disabled), and returns an HMAC-signed proof envelope. Returns |
| share | Same as prove, plus inserts a row into share_tokens (recipient_agent_id, expiry, proof) and returns a share_token. The token is a 24-byte base64url string, valid for seven days. |
| search | Embeds the query, calls match_facts (a security definer SQL function with cosine distance over pgvector), and returns ranked summaries for **server-sealed rows only**. Client-sealed rows are excluded at the SQL level **a |
| verify_proof | Validates an envelope without loading any fact. Malformed envelope returns 400 / VALIDATION_ERROR; well-formed envelope with a bad HMAC returns 200 with data.valid: false. |
| sandbox | Executes a small allow-listed function inside an isolated node:vm sandbox (no host I/O, 50 ms timeout) and returns the result with attestation metadata and a short-lived HS256 JWT (proof_of_execution). Every response adv |
claude mcp add zkshare --env ZKSHARE_API_KEY=your-value --env ZKSHARE_API_URL=your-value --env ZKSHARE_ENCRYPTION_SECRET=your-value --env ZKSHARE_PROOF_SECRET=your-value --env INVALID_API_KEY=your-value --env ZKSHARE_ENCLAVE_JWT_SECRET=your-value --env UPSTASH_REDIS_REST_URL=your-value --env UPSTASH_REDIS_REST_TOKEN=your-value -- npx -y zkshare-mcp| Variable | Description | Required |
|---|---|---|
| ZKSHARE_API_KEY | Credential the server authenticates with. | Yes |
| ZKSHARE_API_URL | Endpoint or connection string the server talks to. | Yes |
| ZKSHARE_ENCRYPTION_SECRET | Credential the server authenticates with. | Yes |
| ZKSHARE_PROOF_SECRET | Credential the server authenticates with. | Yes |
| INVALID_API_KEY | Credential the server authenticates with. | Yes |
| ZKSHARE_ENCLAVE_JWT_SECRET | Credential the server authenticates with. | Yes |
| UPSTASH_REDIS_REST_URL | Endpoint or connection string the server talks to. | Yes |
| UPSTASH_REDIS_REST_TOKEN | Credential the server authenticates with. | Yes |
Inspect PostgreSQL schemas and run read-only queries with the archived MCP reference server. Review its maintenance status before choosing it.
Connect the Notion MCP server to search workspace content and work with pages and databases through Notion’s hosted OAuth service.
Use the Supabase MCP server to inspect database schemas, query project data and retrieve docs through a project-scoped connection.
Query, modify and analyse local SQLite databases in conversation — the fastest way to chat with a data file.
Metabase ships its own MCP endpoint — search your BI content, build and run queries, and save questions and dashboards without leaving the chat.
Official MongoDB server covering data, schemas and Atlas management — from find queries to spinning up clusters.