Solo Dev Quickstart

No org, no team, no ceremony. Install the server locally, push a secret, retrieve it, and wire Claude up to the vault — all in under five minutes.

Install

docker run -d \
  --name sirrd \
  -p 39999:39999 \
  -v ./sirr-data:/data \
  -e SIRR_MASTER_KEY="$(openssl rand -hex 32)" \
  -e SIRR_DATA_DIR=/data \
  ghcr.io/sirrlock/sirrd

If you installed via Homebrew or binary, start the server manually and export the key:

export SIRR_MASTER_KEY="$(openssl rand -hex 32)"
sirrd serve
# → Server listening on http://localhost:39999
# → Master key: <your-key>   ← save this

Push your first secret

Push a secret with a 1-hour TTL and a single-read limit. Once read, it is gone.

sirr push DB_URL="postgres://user:pass@db:5432/myapp" \
  --reads 1 \
  --ttl 1h

Retrieve a secret

Reading the secret decrements the read counter. With max_reads: 1 this is the only read — the secret destroys itself immediately after.

sirr get DB_URL

Try reading it again — you will get 404 Not Found. The vault already burned it.

Push and pull .env files

# Push your entire .env with a 24-hour TTL
sirr push .env --ttl 24h

# On another machine, pull it back
sirr pull .env

Connect MCP to your local instance

Install the Sirr MCP server so Claude (or any MCP-compatible AI tool) can push and pull secrets directly from your local Sirr instance during a conversation.

npm install -g @sirrlock/mcp

Add a .mcp.json in your project root (or home directory):

{
  "mcpServers": {
    "sirr": {
      "command": "sirr-mcp",
      "env": {
        "SIRR_SERVER": "http://localhost:39999",
        "SIRR_TOKEN": "<your-SIRR_MASTER_KEY>"
      }
    }
  }
}

Verify the connection:

SIRR_SERVER=http://localhost:39999 \
SIRR_TOKEN=$SIRR_MASTER_KEY \
sirr-mcp --health
# → OK

Now Claude can use push_secret and get_secret tools. Secrets pushed through MCP obey the same TTL and read-limit rules — a secret with max_reads: 1 burns after Claude reads it, even across sessions.

What is next

• DevOps Quickstart — add an org, create principals, and store rotating secrets for Claude and GitHub
• MCP Server — full MCP tool reference and multi-tenant configuration
• API Keys — scope access to specific secret prefixes
• Architecture — how Sirr encrypts and stores secrets