SAFE MCP Server

An MCP server that gives AI assistants the ability to encrypt and decrypt files using SAFE.

Prerequisites

The safe CLI must be installed and available in PATH. See thesafe.dev/download.

Setup

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "safe-encryption": {
      "command": "npx",
      "args": ["safe-mcp-server"]
    }
  }
}

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "safe-encryption": {
      "command": "npx",
      "args": ["safe-mcp-server"]
    }
  }
}

Available Tools

Tool	Description
safe_encrypt	Encrypt text or file with password, public key, or GitHub username
safe_decrypt	Decrypt a .safe file (auto-discovers keys from ~/.safe/ and ~/.ssh/)
safe_keygen	Generate encryption keypair (x25519, p-256, ml-kem-768)
safe_info	Inspect encrypted file metadata without decrypting
safe_keys	List identities and recipients

Usage

Once configured, ask your AI assistant:

• "Encrypt this file with a password"
• "Decrypt secrets.safe"
• "Generate an encryption key"
• "Encrypt this for github:alice"
• "Who can decrypt this .safe file?"