Skip to main content

SCRIPTMASTERLABS — GhostKey MCP

com.scriptmasterlabs/ghostkeyVersion 1.2.1

Remote MCP for compliant pay-per-use agent capabilities with x402 execution.

Status

Responds249 msAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.
Last checked
Nov 14, 2026, 14:14 UTC
Latency
249 ms
Remotes responding
1 of 1
Sign-in
No sign-in
Hosting
Hosted outside the EU (detected)
Registry data as of
Nov 14, 2026, 21:12 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP
https://ghostkey-mcp.onrender.com/mcpResponds249 ms
No sign-in

Claude Code

claude mcp add --transport http ghostkey https://ghostkey-mcp.onrender.com/mcp

Claude Desktop and claude.ai

Settings > Connectors > Add custom connector
Name: ghostkey
Remote MCP server URL: https://ghostkey-mcp.onrender.com/mcp

Cursor

{
  "mcpServers": {
    "ghostkey": {
      "url": "https://ghostkey-mcp.onrender.com/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"ghostkey","type":"http","url":"https://ghostkey-mcp.onrender.com/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

10 tools

Tools of SCRIPTMASTERLABS — GhostKey MCP
Read-only
Idempotent
Open world
ghostkey_catalogList the capabilities actually exposed by this GhostKey MCP server and identify staged families without pretending they are callable.NoYesYesYes
ghostkey_device_pairing_createCreate a one-time trusted-device enrollment capability. Requires GhostKey persistent trusted-device storage to be configured. The browser generates its own non-exportable P-256 private key; only the public key is uploaded.NoNoNoYes
ghostkey_device_pairing_statusResolve a one-time trusted-device pairing after the browser has enrolled. Requires the original pairing ID and pairing code and is available only until that pairing capability expires.NoYesYesYes
ghostkey_policyReturn GhostKey's operating, payment, upstream-rights, browser-session, and trusted-device policy for autonomous agents.NoYesYesYes
ghostkey_quoteExplain how to obtain authoritative pricing for a GhostKey/SML paid capability. Pricing and settlement destination come from the fresh live HTTP 402 challenge, never a copied wallet or stale fixed price.NoYesYesYes
ghostkey_session_actionRelay one authorized browser action into the user's already-authenticated browser. Actions: navigate, inspect, click, input, select, read, wait. Password/hidden fields and off-allowlist navigation are denied. API and bridge documentation: https://ghostkey-mcp.onrender.com/session-bridge/README.txt.YesNoNoYes
ghostkey_session_createPAID tool ($0.10 USDC via x402 v2, Base). Create a short-lived, origin-scoped browser delegation session. Send the x402 PAYMENT-SIGNATURE header on the /mcp request; without payment the call returns the live x402 challenge (HTTP 402, amount 100000 = $0.10 USDC, network eip155:8453). Actions inside a minted session are unmetered. Optionally target a previously enrolled trusted device using its private 256-bit routing capability so its extension can claim the session automatically. The user still handles login/CAPTCHA and any new browser-origin permission themselves.NoNoNoYes
ghostkey_session_revokeImmediately revoke a GhostKey browser delegation session and cancel queued work.YesNoNoYes
ghostkey_session_statusCheck whether a scoped GhostKey browser session is alive and whether its user-controlled browser bridge has a fresh heartbeat.NoYesYesYes
ghostkey_statusReport GhostKey server status and check whether configured ScriptMasterLabs authorities are reachable. Unknown stays unknown; no health result is fabricated.NoYesYesYes

Details

Registry status
Active
Published
Nov 5, 2026
Updated
Nov 5, 2026
Website
https://www.scriptmasterlabs.com/⁠ (opens in a new tab)
Repository
https://gitlab.com/script-master-labs-llc-group/ghostkey⁠ (opens in a new tab)
Categories
Uncategorized
GDPR
Not declared

Are you the operator? Claim this listing