The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the FileSeal Secure Send listing page.
A standalone Model Context Protocol stdio
server that wraps the FileSeal Secure Send API (/v1/sends). It encrypts
files client-side (AES-GCM-256) before they ever reach FileSeal and exposes
three tools to an MCP client (e.g. Claude).
This package is self-contained: it does not import from the FileSeal Next
app. Its crypto (crypto.mjs) mirrors FileSeal's server-side attachment format
byte-for-byte (a 12-byte IV followed by AES-GCM ciphertext, with the key
base64url-encoded in the link fragment), so that ciphertext it produces
decrypts on the FileSeal /receive/[id] page. That page fixes the format: a
changed crypto.mjs produces links that will not open.
secure_send: encrypt one or more files and create a send.
filePath, or filePaths (up to 10 files under one link),
or (fileBase64 + filename + mimeType),
recipientEmail?, deliveryMode ('link' default | 'email'),
expiryHours? (1-168, default 48), message?, senderName?.#k= fragment.recipientEmail. Pass senderName too: without
it the email says the files are from "Someone".senderName and
message. FileSeal stores them as plain text and anyone with the link can
read them, so keep secrets out of message.filePaths to send them under
one link. Calling once per file makes a separate link for each.send_status: { id } → status, expiry, download count, audit events.
Only sends created with the same API key are visible.revoke_send: { id } → the link stops working immediately, and
FileSeal attempts to delete the encrypted files from its servers.| Variable | Required | Default | Purpose |
|---|---|---|---|
FILESEAL_API_KEY | yes | none | Bearer token sent as Authorization: Bearer <key> on every call. The server exits at startup if unset. |
FILESEAL_API_BASE_URL | no | https://fileseal.uk | API origin. Change it only to point at another FileSeal instance, such as http://localhost:3000 when developing FileSeal itself. Routes are <base>/v1/sends. Versions before 0.1.3 defaulted to http://localhost:3000, so set it explicitly if you pin an older version. |
No install needed: npx fetches and runs the latest published version:
The server speaks MCP over stdio, so it's normally launched by an MCP client rather than run by hand.
.mcp.json)The "fileseal-send" key is just the local server label; the npm package is
@fileseal/send. To run a local checkout instead, point command/args at
your copy of index.mjs.
The claude-plugin/ folder packages this server as a Claude
Code plugin, with a skill that tells Claude how to use it. The plugin asks for
your API key when you enable it and keeps it in secure storage rather than in
your settings files. To install it from this repository:
It works in Claude Code only. The plugin's README explains why, and lists what it runs and sends.