# Sekreto MCP gateway

Anti-detect browser automation for AI agents, served over MCP (streamable HTTP).

## Endpoint

- MCP server: https://api.sekreto.ai/mcp (POST, JSON-RPC 2.0, protocol 2026-07-28)
- Auth: `x-api-key: <your key>` header or `Authorization: Bearer <your key>` (header must carry the RAW key; only Authorization takes the Bearer prefix)
- Every JSON-RPC request needs: `Accept: application/json, text/event-stream`
- Every request also carries an `Mcp-Method` header equal to the JSON-RPC method and, for tools/call, `Mcp-Name` equal to the tool name; `params._meta` carries the protocol version keys

## Docs

- Full API + tool reference (self-contained): https://sekreto.ai/api.md
- Benchmarks with methodology, dates, and the honest losses: https://sekreto.ai/benchmarks.html

## Onboard

- Create an account: https://sekreto.ai/account.html (no email, no password — account number only)
- Top up: €5 = 500 calls, €10 = 1,000, €20 = 2,000. Calls never expire, failed calls are not billed, no subscription. First top-up pays a +500 call bonus
- Client recipes (Claude, Goose, Hermes): https://api.sekreto.ai/ (landing page, "Connect your agent")
- Signup/API-key support: https://sekreto.ai/terms.html

## Tools

- browser_navigate, browser_click, browser_snapshot, browser_scroll — full browser control with fingerprint persistence per tenant
- search, extract — web search; clean page content from any URL (three-tier pipeline: plain HTTP, challenge solving, stealth browser)
- usage — remaining calls, concurrent sessions, rate limit (free, does not consume quota)
- Tab lifecycle: create/list/delete instances and tabs, scoped per tenant
- All 22 tools with schemas: https://sekreto.ai/api.md

## Usage lookup (no key needed)

- GET https://api.sekreto.ai/check?acct=<16-digit account number>

## Policies

- Accounts are a random 16-digit number; nothing else is collected (no email, no name, no browsing history)
- Browser state lives in isolated RAM and is destroyed after the session — never on disk, never shared
- Runs entirely in the EU (Frankfurt, Germany)
- Keys are rotatable: message support@sekreto.ai and the account keeps its balance