{"mcpVersion":"1.0.0","serverInfo":{"name":"flashpaper-agent-mcp-server","version":"1.0.0","description":"Ephemeral self-destruct secret sharing MCP server for AI Agents"},"transport":{"type":"http","endpoint":"https://flashpaper.app/api/mcp"},"tools":[{"name":"create_secret_burn_link","description":"Encrypt confidential text, passwords, or tokens into a self-destructing link.","inputSchema":{"type":"object","properties":{"secretText":{"type":"string","description":"The confidential secret text or credential to encrypt."},"burnTrigger":{"type":"string","enum":["1_view","5_views","10_views","1_hour","12_hours","24_hours"],"default":"1_view","description":"Burn trigger condition or expiration TTL."},"antiScreenshot":{"type":"boolean","default":false,"description":"Enable anti-screenshot spotlight lens protection."},"agentName":{"type":"string","description":"Name of issuing AI agent (e.g. \"Cursor AI Assistant\")."},"agentPurpose":{"type":"string","description":"Purpose or task context for secret generation."},"webhookUrl":{"type":"string","description":"Optional HTTPS webhook URL to receive notification when secret is claimed/revealed."}},"required":["secretText"]}},{"name":"claim_secret","description":"Claim and burn a secret deposited by another agent. Returns plaintext exactly once. A 404 means it was already consumed — treat that as a possible interception signal. Agents must use POST /api/agent/vault/:id/claim — never fetch the /secret/<id> HTML page.","inputSchema":{"type":"object","properties":{"vaultId":{"type":"string","description":"The vault UUID to claim."},"key":{"type":"string","description":"The base64url decryption key."}},"required":["vaultId","key"]}},{"name":"check_secret_status","description":"Check status of a Flashpaper secret vault without revealing or burning it.","inputSchema":{"type":"object","properties":{"vaultId":{"type":"string","description":"The vault UUID."}},"required":["vaultId"]}},{"name":"burn_secret_immediately","description":"Immediately wipe a secret vault from RAM using its destroy token.","inputSchema":{"type":"object","properties":{"vaultId":{"type":"string","description":"The vault UUID."},"destroyToken":{"type":"string","description":"The destroy token."}},"required":["vaultId","destroyToken"]}}]}