WebCrypt MCP Server

WebCrypt v1.0.1

Zero-dependency Web Crypto & native AI Agent Tooling (MCP) for modern JavaScript.

AES-256-GCM symmetric encryption, RSA-4096 hybrid public keys, ECDH key agreement, ECDSA/HMAC digital signatures, and Post-Quantum KEM (Kyber/Dilithium) — zero runtime dependencies, pure Web Crypto API.

---

⚡ Quickstart (15 Seconds)

1. Installation

# 📦 Install as project library (Node.js, TypeScript, Browser)

npm install webcrypt

🌐 Install globally (CLI utilities & global MCP tools)

npm install -g webcrypt

import { WebCrypt, WebCryptAsym } from "webcrypt";

// 🔒 Symmetric AES-256-GCM (600k PBKDF2 iterations) const wc = new WebCrypt(); const encrypted = await wc.encryptText("Secret payload", "password"); const decrypted = await wc.decryptText(encrypted, "password");

// 🔑 Asymmetric RSA-4096 Hybrid Encryption const wca = new WebCryptAsym(); const keyPair = await wca.generateKeyPair(4096); const cipher = await wca.encryptText("Secret payload", keyPair.publicKey); const plain = await wca.decryptText(cipher, keyPair.privateKey);

---

2. Auto-Setup for AI Agents & IDEs (MCP Server)

# Initialize MCP server, agent skills, and rules across your project

npx webcrypt init # or webcrypt init if installed globally

_Supports Google Antigravity, Cursor, Claude Desktop, VS Code / Copilot, Windsurf, Cline, and Zed._

---

🤖 Why AI Agents Need WebCrypt MCP

Equip autonomous coding agents with an authenticated cryptographic vault directly in their toolbelt:

• 🔐 Confidential Local Vaulting (`encrypt_payload`): Encrypt API keys and state memory before writing to disk to prevent prompt log leaks.
• 🛡️ Tamper-Proof Provenance (`sign_verify`): Cryptographically sign test evidence packs, release binaries, and code diffs with ECDSA or HMAC.
• 🤝 Inter-Agent Key Exchange (`manage_keys`): Ephemeral JWK keypairs (RSA-4096, ECDH P-256/P-384) for private agent-to-agent messaging.
• ⚛️ Post-Quantum Guardrails (`pqc_kem_sign`): Built-in Kyber KEM and Dilithium signatures future-proof long-term agent artifacts.
• ⚡ Zero Dependencies: 100% native crypto.subtle execution across Node.js 18+, Bun, browsers, and Edge runtimes.

┌───────────────────────────────────────────────────────────┐

│ Autonomous AI Coding Agent │ │ (Antigravity / Cursor / Claude / Copilot / Cline) │ └─────────┬───────────────────┬───────────────────┬─────────┘ │ │ │ ▼ ▼ ▼ ┌───────────────────┐┌───────────────────┐┌───────────────────┐ │ state-memory-mcp ││ vision-memory-mcp ││ webcrypt │ │ (Workflow State) ││ (Visual Cache) ││ (Security Vault) │ │ • Task Graph DAG ││ • UI Grounding ││ • AES-256 Vault │ │ • Decisions & SDD││ • Layout Trees ││ • RSA/ECDH Keys │ │ • Event Ledger ││ • Visual History ││ • Digital Sigs │ └───────────────────┘└───────────────────┘└───────────────────┘

---

🛠️ MCP Tools Reference (6 Core Tools)

---

📚 Technical Documentation Directory

Explore dedicated guides in docs/ and examples/:

---

🌐 PuterVision Triad Standard

• 📊 [`@putervision/state-memory-mcp`](https://github.com/putervision/state-memory-mcp): Persistent SQLite graph for workflow states, task DAGs, and decision trails.
• 👁️ [`@putervision/vision-memory-mcp`](https://github.com/putervision/vision-memory-mcp): Multimodal visual layout cache, AX grounding, and video replay analysis.
• 🔐 [`webcrypt`](https://github.com/putervision/webcrypt): Zero-dependency cryptographic vault, payload encryption, key management, and digital signatures.

---

🧪 Testing & Diagnostics

# Run unit & integration test matrix (30 suites, 247 tests)

npm test

Run live MCP tool test runner (25 assertions, 100% verified)

node .agents/skills/webcrypt-mcp/scripts/exercise_tools.js

Audit environment & project configuration health

webcrypt doctor

---

⚖️ License & Disclaimers

Developed and maintained by PuterVision. Released under the MIT License.

• 100% Local Execution Guarantee: All cryptographic operations execute locally in memory via standard W3C Web Crypto API (crypto.subtle). Zero external API calls, telemetry, or network transmissions.
• Trademarks & Non-Affiliation: Product names (Cursor, Claude, Google Antigravity, VS Code, GitHub Copilot, Windsurf, Cline, Zed) are property of their respective owners and used solely for compatibility identification.