Safehold
Local vault that keeps passports, visas, IDs, and travel photos encrypted on your machine and only releases specific fields when an agent asks with a stated purpose. You get a consent prompt for every retrieval: passport number for a flight booking, driving license for a rental car, visa details for a border form. Runs as a stdio server, encrypts everything with XChaCha20-Poly1305, logs every access. Ships with prompts for document intake and expiry checks, plus a separate skills package that combines it with browser automation to fill airline check-ins and KYC forms field by field. Built for the case where you want agents handling identity documents without scattering copies across chat logs and API providers.
- tools
- 11
- transport
- STDIO
- last updated
- May 18, 2026
Tools
11 toolsPublic tool metadata for what this MCP can expose to an agent.
add_documentAdd a document to the vault
Add a document to the vault
No parameter schema in public metadata yet.
list_documentsList stored documents (metadata only)
List stored documents (metadata only)
No parameter schema in public metadata yet.
update_documentUpdate fields on an existing document
Update fields on an existing document
No parameter schema in public metadata yet.
delete_documentPermanently delete a document
Permanently delete a document
No parameter schema in public metadata yet.
get_passportRetrieve specific fields from a passport
Retrieve specific fields from a passport
No parameter schema in public metadata yet.
get_national_idRetrieve specific fields from a national ID
Retrieve specific fields from a national ID
No parameter schema in public metadata yet.
get_driving_licenseRetrieve specific fields from a driving licence
Retrieve specific fields from a driving licence
No parameter schema in public metadata yet.
get_visaRetrieve specific fields from a visa
Retrieve specific fields from a visa
No parameter schema in public metadata yet.
get_photoRetrieve a stored photo (passport style, selfie, or signature)
Retrieve a stored photo (passport style, selfie, or signature)
No parameter schema in public metadata yet.
get_documentRetrieve fields from any document type
Retrieve fields from any document type
No parameter schema in public metadata yet.
get_access_logView what was accessed, by which client, and when
View what was accessed, by which client, and when
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Safehold
Your identity documents, on your machine, shared only when you say so.
What it is
Safehold is a local MCP server that stores passports, visas, driving licences, and other identity documents. When an AI agent needs your passport number to book a flight, it asks Safehold. You see what's being requested and why, then approve or deny. Nothing leaves your device.
Why it exists
Your identity data is scattered across dozens of services you don't control: banks, airlines, government portals, SaaS products. Each one holds a copy and decides for itself how to store it, whether to sell it, and how long it'll stick around. AI agents make this worse. Anything an agent can access, every API it touches can reach too.
Details
- Repository
- github.com/spacetime-technology/safehold
- Package
safehold- Transport
- STDIO
- Registry
- MCP registry, active