🔐 SecureNote.link MCP Server

End-to-End Encrypted Note Sharing for AI Agents

Because your secrets deserve better than plain text

Try the Web App • MCP Hub • Report Issue

🎯 What is This?

Ever needed your AI assistant to share sensitive information with you securely? API keys, passwords, database credentials, or any secret data? SecureNote.link MCP Server lets Claude, Cursor, and other AI agents create encrypted notes that you can safely open in your browser.

Your AI creates the note, gives you a link, and you open it at securenote.link—where the note decrypts in your browser and then self-destructs. Think of it as a secure handoff from AI to human, with military-grade encryption and zero-knowledge architecture that ensures even the server never sees your data.

🌐 For Recipients: Reading Secure Notes

Someone sent you a secure note link? Visit securenote.link in any browser!

One-click links → Just click and read (note auto-decrypts)

Two-part security → Paste the URL and key into a browser (separated by #)

Works everywhere → Desktop, mobile, any browser

No sign-up needed → Completely anonymous

✨ Why You'll Love It

🛡️ Fort Knox Security AES-256-GCM encryption (the same used by governments) Zero-knowledge architecture (server never sees your data) Client-side encryption (your data is encrypted before leaving your device) Optional password protection for extra peace of mind	⚡ Ridiculously Easy One-click sharing for recipients (just click the link!) Works in any browser via securenote.link No account needed for you or recipients Works with Claude Desktop, Cursor, and any MCP client
⏱️ Flexible & Smart Set expiration: 1, 24, 72, or 168 hours Self-destructing notes that vanish after first view Health monitoring to verify everything's working Manual decryption functions for advanced users	🧑‍💻 Developer Friendly Clean, documented API Comprehensive error handling Built-in usage instructions Active maintenance and support

🚀 Quick Start

Installation

Option 1: MCP Hub (Recommended) 🐳

Available as a pre-built Docker image on MCP Hub:

👉 Get it on MCP Hub

Follow the simple setup instructions on MCP Hub to add it to your Claude Desktop or other MCP client.

Option 2: Direct Python Installation 🐍

# Install dependencies
pip install -r requirements.txt

📋 Claude Desktop Configuration

Find your config file:
- macOS/Linux: ~/Library/Application Support/Claude/claude_desktop_config.json
- Windows: %AppData%\Claude\claude_desktop_config.json

Add this configuration:

{
  "mcpServers": {
    "secure-notes": {
      "command": "python3",
      "args": ["/ABSOLUTE/PATH/TO/secure_note_mcp.py"]
    }
  }
}

Restart Claude Desktop and you're ready!

🎨 How It Works

Your AI agent creates an encrypted note, and you share the link with anyone who needs the information. They simply open it in their browser at securenote.link to read it.

Two Security Modes for Different Needs

🟢 Convenience Mode (One-Click URLs)

Perfect for quick, trusted sharing. Recipients just click and read—no copy-pasting required!

https://securenote.link?id=abc123#dGVzdGtleQ==
                                 ↑
                    Decryption key in URL fragment
                    (never sent to server!)

How it works:

AI creates the encrypted note
You get a single link
Share via email, Slack, chat, etc.
Recipient clicks → note decrypts in their browser → self-destructs

Best for: Team members, trusted colleagues, or when convenience matters

🔴 Maximum Security Mode (Two-Channel)

For when security is paramount. Get separate URL and decryption key to share through different channels.

URL:  https://securenote.link/api/v1/secrets/xyz789
Key:  dGVzdGtleQ==
      ↑
  Share these via different channels!

How it works:

AI creates the encrypted note
You get URL + separate decryption key
Share URL via one channel (email)
Share key via another channel (text/Slack)
Recipient pastes both into securenote.link → decrypts

Best for: Highly sensitive data, compliance requirements, paranoid security posture

🤖 Can AI Agents Share with Other AI Agents?

Yes! The retrieve_and_decrypt_secret tool allows one AI agent to retrieve notes created by another. However, this is less common since AI agents typically don't have persistent memory across conversations. The primary use case is AI-to-human sharing.

💡 Real-World Examples

📧 Email Credentials Securely

You: "Generate our new email server password and create a secure note 
      I can send to the IT team."

Claude: "I've generated a strong password and created a secure note:
         
         🔗 https://securenote.link?id=x7k2p#dGVzdGtleQ==
         
         Share this link via email or Slack. It expires in 24 hours
         and self-destructs after the first person views it.
         
         They just click the link and the password will appear in their browser!"

🔐 Share API Keys with Team Members

You: "Create a secure note with our production API key 
      that I can share with the new developer."

Claude: "Created a secure note with your API key:
         
         🔗 https://securenote.link?id=k9m3x#c2VjcmV0a2V5
         
         Send this link to your developer. When they click it:
         • The note will decrypt in their browser
         • They can copy the API key
         • The note will immediately delete itself
         
         No chat logs, no email archives—completely secure!"

🛡️ Maximum Security for Sensitive Data

You: "I need to share database credentials with our contractor,
      but I want maximum security."

Claude: "Created a secure note with two-channel security:
         
         📎 Send via email: 
         https://securenote.link/api/v1/secrets/9m4x2
         
         🔑 Send via Slack/text: 
         dGVzdGtleXZhbHVl
         
         They'll need BOTH to decrypt. Share them through different
         channels—even if one is compromised, the data stays secure.
         
         They can paste both into securenote.link to retrieve the credentials!"

🔍 Retrieve and Read a Note (as a Human)

When someone sends you a secure note link:

Click the link → Opens securenote.link in your browser
Note decrypts automatically → See the secret message
Copy what you need → Message deletes immediately after viewing
Done! → No trace left behind

Or if you have a separate URL and key:

Construct the full URL by combining them:
- Format: https://securenote.link?id={secret_id}#{decryption_key}
- Example: https://securenote.link?id=xyz789#dGVzdGtleQ==
Open the assembled URL in your browser
Secret decrypts automatically and is then deleted

🔧 Available Tools

The MCP server provides these tools to your AI agent:

Tool	What It Does
`send_secure_note`	Create a convenient one-click shareable URL
`send_secure_note_return_api_url_and_key`	Create separate URL + key for maximum security
`retrieve_and_decrypt_secret`	Retrieve and decrypt a secret using ID and key
`check_api_health`	Verify API server status and connectivity
`get_instructions`	Get comprehensive usage documentation

📖 Full API Reference

`send_secure_note`

Creates a convenient one-click URL (recommended for most use cases).

Parameters:

message (string, required): The secret message to encrypt
password (string, optional): Additional password protection
expires_in (integer, optional): Hours until expiration (1, 24, 72, or 168)

Returns: Single shareable URL with embedded decryption key

`send_secure_note_return_api_url_and_key`

Creates separate URL and key for maximum security.

Parameters:

message (string, required): The secret message to encrypt
password (string, optional): Additional password protection
expires_in (integer, optional): Hours until expiration (1, 24, 72, or 168)

Returns: API URL and Base64-encoded decryption key (separately)

`retrieve_and_decrypt_secret`

Retrieves and decrypts a secret.

Parameters:

secret_id (string, required): Secret identifier
decryption_key (string, required): Base64-encoded key
password (string, optional): If the secret is password-protected

Returns: Decrypted message content

🔬 Security Deep-Dive

The Encryption

Algorithm: AES-256-GCM (Galois/Counter Mode)
- 256-bit keys (impossible to brute force with current technology)
- Authenticated encryption (integrity + confidentiality)
- Unique IV for each message (prevents pattern analysis)

The Architecture

┌─────────────┐                    ┌─────────────┐
│   Client    │                    │   Server    │
│  (Your AI)  │                    │             │
└──────┬──────┘                    └──────┬──────┘
       │                                  │
       │ 1. Generate random key           │
       │    (never sent!)                 │
       │                                  │
       │ 2. Encrypt message locally       │
       │────────────────────────────────> │
       │    (only encrypted data sent)    │
       │                                  │
       │ 3. Server stores encrypted blob  │
       │    (can't decrypt without key!)  │
       │                                  │
       │ 4. Returns secret ID             │
       │ <──────────────────────────────  │
       │                                  │
       
Key stays with client → Zero-knowledge achieved ✅

Why This Matters

Zero-Knowledge: The server literally cannot decrypt your data (it doesn't have the key)
No Trust Required: You don't need to trust the server operator
Self-Destructing: Even if someone gets the URL, the note deletes after viewing
Time-Limited: Secrets automatically expire, reducing exposure window

🆘 Troubleshooting

❌ Module not found errors

pip install fastmcp httpx cryptography

Make sure you're using Python 3.11+:

python3 --version

🔌 Connection issues

Use the built-in health check:

Ask your AI: "Check the SecureNote.link API health"

Verify:

Internet connection is working
https://securenote.link is accessible
Firewall isn't blocking the connection

🔓 Decryption failures

Common causes:

Secret has already been viewed (burn-after-reading)
Secret has expired (check expiration time)
Wrong decryption key or password
Key was truncated when copying

⚙️ MCP configuration problems

Restart your MCP client after config changes
Verify JSON syntax is valid
Use absolute paths (not relative)
Check file permissions on the script

🤝 Contributing & Support

Found a bug? Have a feature request? We'd love to hear from you!

Issues: Report on GitHub
Discussions: Share ideas and get help
Documentation: Full docs available

📄 License

MIT License - Use it however you want!

Made with ❤️ for secure AI workflows

Your secrets are safe with us (because we never see them!)

🌐 Try SecureNote.link • 🐳 Get on MCP Hub

⭐ Star us on GitHub if this helps you!

Name		Name	Last commit message	Last commit date
Latest commit History 21 Commits
.dockerignore		.dockerignore
.gitignore		.gitignore
Dockerfile		Dockerfile
README.md		README.md
requirements.txt		requirements.txt
secure_note_mcp.py		secure_note_mcp.py
setup_mcp.sh		setup_mcp.sh

jackalterman/securenote-link-MCP-server

Folders and files

Latest commit

History

Repository files navigation

🔐 SecureNote.link MCP Server

End-to-End Encrypted Note Sharing for AI Agents

🎯 What is This?

🌐 For Recipients: Reading Secure Notes

✨ Why You'll Love It

🛡️ Fort Knox Security

⚡ Ridiculously Easy

⏱️ Flexible & Smart

🧑‍💻 Developer Friendly

🚀 Quick Start

Installation

🎨 How It Works

Two Security Modes for Different Needs

🟢 Convenience Mode (One-Click URLs)

🔴 Maximum Security Mode (Two-Channel)

🤖 Can AI Agents Share with Other AI Agents?

💡 Real-World Examples

📧 Email Credentials Securely

🔐 Share API Keys with Team Members

🛡️ Maximum Security for Sensitive Data

🔍 Retrieve and Read a Note (as a Human)

🔧 Available Tools

send_secure_note

send_secure_note_return_api_url_and_key

retrieve_and_decrypt_secret

🔬 Security Deep-Dive

The Encryption

The Architecture

Why This Matters

🆘 Troubleshooting

🤝 Contributing & Support

📄 License

Made with ❤️ for secure AI workflows

About

Topics

Resources

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Languages

`send_secure_note`

`send_secure_note_return_api_url_and_key`

`retrieve_and_decrypt_secret`

Packages