Back to Browse

Json Chamber MCP Server

Developer ToolsModerate6.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Two-key JSON seal/open. Cloak needs a live license. Open is keys-only.

About

Two-key JSON seal/open. Cloak needs a live license. Open is keys-only.

Security Report

6.2
Moderate6.2Moderate Risk

This MCP server implements cryptographic JSON sealing with a license-gating system. The code is well-structured with proper use of Node.js crypto APIs and no obvious malicious patterns. However, there are moderate security concerns: (1) the default master secret fallback is a weak hardcoded string, (2) license state is stored in plaintext JSON files in the home directory with HMAC-based tampering detection rather than proper encryption, and (3) the license verification system relies on environment variable inspection without formal API validation. Permissions are appropriate for the stated purpose. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

5 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-ceedot-rock-json-chamber-mcp": {
      "args": [
        "-y",
        "json-chamber-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

json-chamber-mcp

Chamber MCP — seal / open JSON. Slid Phi Labs.

Cloak (seal new JSON) needs a live license. Open of an already-sealed blob is both keys, no extra payment. Ciphertext does not expire.

Install / run

npx -y json-chamber-mcp
{
  "mcpServers": {
    "json-chamber": {
      "command": "npx",
      "args": ["-y", "json-chamber-mcp"],
      "env": {
        "CHAMBER_MASTER_SECRET": "your-high-entropy-secret"
      }
    }
  }
}

Discovery

SurfaceURL
Official registry idio.github.ceedot-rock/json-chamber-mcp
Lab well-knownhttps://www.slidphilabs.com/.well-known/mcp.json
Lab llms.txthttps://www.slidphilabs.com/llms.txt
npmjson-chamber-mcp 1.2.0
Server schemaserver.json
Producthttps://www.slidphilabs.com/chamber

Hosted lab MCP (PCC + catalog): POST https://www.slidphilabs.com/mcp · Smithery: https://smithery.ai/servers/slidphi/lab

Pricing

SKUWhatPrice
Chamber trycloak new JSON24 hours free
Chamber monthcloak license$9
Chamber yearcloak license$99
Openalready-sealed blobkeys only

Prices live on https://www.slidphilabs.com/chamber

Tools

ToolPurpose
chamber_statuscloak try remaining / dead / purchased
chamber_infopointer to live prices
chamber_cloakseal JSON / text (licensed)
chamber_openopen sealed blob (keys only)
chamber_hop_gateadmit/reject hop (gate only)
chamber_hop_reject_loglive sanitized reject log

Hop-gate (ScanChunk / Rider SoT)

Admission layer in front of seal/open. Seal/open APIs are unchanged. No SettleHop / x402.

Wire is exact text (Agent-Rider agent-rider-c / PR #22), not JSON:

CUNI ScanChunk
url=https://example.com/
etag="abc"
hash=sha256:…
agent_id=agt_1

Fields (allowlist): url · etag · hash · agent_id. Gate result wire is a single exact-text code string (not a JSON body).

CodeMeaning
admithop allowed
reject.schemaChamber-local only (Rider does not emit)
reject.extraunknown keys or wrong kind — fail-closed; do not bind; never rehydrate
reject.hashempty / invalid hash
reject.replayhash already seen
reject.agentagent allowlist fail
reject.emptyempty / missing required fields (url, hash, agent_id)

Live reject.log is TSV ISO\tcode\tpreview (mirrors agent-rider-c/reject.log); preview truncates ~120 and flattens newlines. Extra-key values never rehydrate as next machine input.

PCC ≠ payment — PCC is the compression/storefront face; hop-gate codes are admission control, not billing.

MCP tools: chamber_hop_gate, chamber_hop_reject_log.

Related

Reviews

No reviews yet

Be the first to review this server!