Log inSubmit server
AgentLair logo

AgentLair

Provides AI agents with email, encrypted credential storage, signed audit events, and behavioral trust scores through MCP.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install AgentLair

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "agentlair": {
      "command": "npx",
      "args": [
        "-y",
        "@agentlair/mcp@latest"
      ],
      "env": {
        "AGENTLAIR_API_KEY": "YOUR_VALUE_HERE",
        "AGENTLAIR_EMAIL": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Automated check passed— started and listed 15 tools correctly (7d ago).

Overview

AgentLair MCP server connects AI agents to AgentLair email, encrypted vault, audit, and trust-scoring capabilities. It runs with npx and authenticates API requests using an AgentLair API key, without OAuth. Use it when an agent needs an email identity, persistent encrypted credentials, signed activity records, or behavioral trust data. The service also supports agent registration and namespace isolation through pods.

Use cases

  • Give an agent a dedicated email address
  • Store agent credentials in an encrypted vault
  • Record signed audit events for agent actions
  • Query behavioral trust before taking action
  • Isolate namespaces across multiple agents

Key features

  • Agent registration and API keys
  • AgentLair email send and receive
  • Client-side AES-GCM vault encryption
  • Ed25519-signed audit events
  • Behavioral trust score queries
  • Pod-based namespace isolation

Tools15

What AgentLair lets your agent do. Expand a tool for its parameters.

Verified live~1.6k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

6/6 checks healthy over the last 46d

What it can do

From the 15 tools this server returned when we ran it.

Can delete or modify data · 2Handles credentials · 2Makes network requests · 1Read-only tools · 13
Network at startup3 connections
Files written at startupNone
Install scriptsNone
npm provenanceNot published
Package age213 days
Maintainers1

Observed 2026-10-16 in an isolated sandbox. A description of reach, not a security audit.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 7d ago via OSV.dev · @agentlair/mcp@latest (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars5Stargazers on the source repository.
npm downloads136Package downloads in the last 30 days.
Last commit2mo agoMost recent push to the default branch.
Availability100%Our rolling endpoint + install checks that succeeded.
Install checkPassedOur sandbox started it and listed its tools.
Tools exposed15Callable tools this server registers over MCP.
Directory activity2 viewsConfig copies, upvotes, and views on AllMCPs.

How AgentLair works

What the AgentLair MCP server does

The AgentLair MCP server exposes AgentLair account and agent infrastructure as MCP tools. It can register an agent, provide an @agentlair.dev email address, send and receive messages, store and retrieve vault values, emit audit events, and query behavioral trust scores.

Email messages can accumulate while an agent is offline and be read at the next session. Agent registration returns an API key, account ID, email address, service tier, and usage limits. The free tier allows 10 emails per day, 100 API requests per day, and 10 email addresses.

The vault is intended for credentials and other sensitive values. Encryption uses client-side AES-GCM, so the service stores ciphertext rather than plaintext credentials. Audit events use Ed25519 signatures and form independently verifiable event chains. Trust scores range from 0 to 100 and are derived from observed behavior, including consistency, restraint, and transparency.

How it works

Run the AgentLair MCP server with npx @agentlair/mcp@latest and connect it to an MCP client. The server communicates with the AgentLair API using an API key. Agents can first be registered through the API or the MCP tool set, then use the returned key for email, vault, audit, and trust operations.

AgentLair also provides Agent Attestation Tokens through its SDK. These short-lived EdDSA JWTs carry an agent identity, trust information, an audience, and scopes. A separate memory service can verify the token through standard JWKS and use its trust claim when deciding whether to accept a write. This token workflow is documented as an SDK capability rather than one of the MCP server's listed tools.

Pods provide namespace isolation for multi-agent or multi-tenant deployments. The underlying service uses Cloudflare Workers for its API and Cloudflare KV for state, according to the repository architecture notes.

Setup and configuration

Install and launch the MCP package with:

Terminal
npx @agentlair/mcp@latest

The documented agent configuration sets two environment variables:

server.ts
export AGENTLAIR_API_KEY=al_live_...
export AGENTLAIR_EMAIL=my-agent@agentlair.dev

Create an account and agent identity with the registration endpoint if you do not already have an API key. The returned key is shown only during registration, so it should be saved securely. The email variable identifies the agent address used for inbox and sending operations.

The repository also documents Python and TypeScript SDK installation, but those SDKs are separate from running the MCP package. Use the SDK when application lifecycle hooks, direct API calls, or attestation-token issuance are needed outside an MCP client.

Tools and capabilities

The AgentLair MCP server groups its tools around:

  • Agent registration
  • Sending and receiving email
  • Storing and retrieving encrypted vault values
  • Emitting signed audit events
  • Querying behavioral trust scores

The service has no OAuth requirement in the documented flow. Email and API usage are subject to the account's limits. Audit findings can receive permanent public URLs, while trust responses include a score, confidence, trend, dimensions, and observation count in the documented API examples.

Limitations and notes

The AgentLair MCP server's free tier is limited to 10 emails per day, 100 API requests per day, and 10 email addresses. The demo trust endpoint is rate-limited to 10 requests per minute per IP; this limit is specifically documented for the demo endpoint.

Client-side encryption means the server stores vault ciphertext, but the material does not describe recovery procedures for lost client-side key material. The README names Claude Code and Cursor as MCP clients and also states that the tools work with MCP clients generally. It does not document client-specific configuration beyond launching the package and setting the environment variables.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about AgentLair

AgentLair is an MCP server that connects AI agents to AgentLair's email, encrypted vault, audit, and trust APIs. Its main tools register agents, send and receive email, store and retrieve vault values, emit audit events, and query behavioral trust scores. It authenticates with an AgentLair API key and runs through npx.

Install it by running `npx @agentlair/mcp@latest`. Configure `AGENTLAIR_API_KEY` and `AGENTLAIR_EMAIL` in the environment used by the MCP client. You can register an agent through the documented API endpoint to obtain an API key and an `@agentlair.dev` address.

AgentLair uses `AGENTLAIR_API_KEY` and `AGENTLAIR_EMAIL` in the documented setup. The API key authenticates requests, while the email variable identifies the agent address used for inbox and sending operations.

Yes, AgentLair names Cursor as a supported MCP client.

Related MCP servers

All in Communication All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewAgentLair AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/agentlair?style=directory)](https://allmcps.com/mcp/agentlair)
HTML Embed
<a href="https://allmcps.com/mcp/agentlair"><img src="https://allmcps.com/api/badge/agentlair?style=directory" alt="AgentLair on AllMCPs" /></a>