What encryption does Bitatlas use?
All files are encrypted in the browser or SDK with AES-256-GCM before upload; the server never sees plaintext data or encryption keys.

@bitatlas-group
Basic information
BitAtlas is a next-generation cloud storage platform designed with privacy and AI agents in mind. It provides a secure, zero-knowledge environment where your most sensitive documents are encrypted client-side and accessible only to you and the agents you authorize.
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"bitatlas": {
"command": "npx",
"args": [
"-y",
"@bitatlas/mcp-server"
],
"env": {
"BITATLAS_API_KEY": "your-api-key",
"BITATLAS_MASTER_KEY": "your-master-key"
}
}
}
}Get vault health status, file count, and storage usage.
List files in the vault. Optionally filter by folder, category, or search term.
Search vault files by a query string, optionally narrowed to a category.
Get file metadata and download + decrypt the file content. Returns decrypted content as UTF-8 text for text files, or base64 for binary files. Requires BITATLAS_MASTER_KEY.
Read a local file, encrypt it client-side with AES-256-GCM, and upload it to the vault. Requires BITATLAS_MASTER_KEY. Files over 100 MB are not supported via MCP.
Permanently delete a file from the vault.
Create a new folder in the vault.
Generate a zero-knowledge share link for a vault file, to hand it to a human. The returned link is PUBLIC: ANYONE who has the link can open and read the file. The decryption key is in the URL fragment (#k=...) — BitAtlas never sees it and cannot read the file, but whoever you send the link to can. Confirm with the user before sharing anything sensitive. Requires BITATLAS_MASTER_KEY.
List the share links you have created, with their expiry, download count, and status.
Revoke a share link so the server stops handing out the file. Note: anyone who already downloaded the file keeps it — revocation only stops future downloads.
Bitatlas is a zero-knowledge cloud storage platform that encrypts files client-side with AES-256-GCM and integrates with AI agents via the Model Context Protocol (MCP). It is designed for users who need privacy-preserving document storage for both human productivity and AI agent assistance.
To use Bitatlas with an AI agent, configure the MCP server in your client’s JSON config with the command npx -y @bitatlas/mcp-server and set the environment variables BITATLAS_API_KEY and BITATLAS_MASTER_KEY.
All files are encrypted in the browser or SDK with AES-256-GCM before upload; the server never sees plaintext data or encryption keys.
Infrastructure is hosted on European soil, subject to GDPR and Europe’s strongest privacy regulations.
Access is anonymous via the x402 payment standard; agents pay with USDC stablecoins on Base – no account, API key, or KYC required.
Files include 30 days of storage with a pay-to-renew model.
Yes, agents integrate through the MCP server using your API key and derived master key for secure access.

Model Context Protocol Servers
A Model Context Protocol (MCP) server for platform-agnostic file capabilities, including advanced search/replace and directory tree traversal
Official MCP server for pdfAssistant. Connect Claude, ChatGPT, or any MCP client to perform professional PDF processing like OCR, permanent redactions, secure encryption, format conversions, and 40+ advanced operations p
Blazing-fast, asynchronous MCP server for seamless filesystem operations.
Comments