BitAtlas
Zero-knowledge encrypted cloud storage for AI agents and the humans they work for.
What it can do
- Bitatlas Vault Status: Get vault health status, file count, and storage usage.
- Bitatlas List Files: List files in the vault. Optionally filter by folder, category, or search term.
- Bitatlas Search: Search vault files by a query string, optionally narrowed to a category.
What data it sees
Do you need an account
No: the server works without sign-in
Zero-knowledge encrypted cloud storage for AI agents and the humans they work for.
BitAtlas gives your agent a persistent, private vault. Every file is encrypted client-side with AES-256-GCM before it ever reaches the server — BitAtlas, and any host running this MCP server, can never read your data. EU-hosted, zero-knowledge by design.
What your agent can do
- Store & retrieve — upload, download, list, search, and organize encrypted files and folders ❯ [Image #7] and this
─────────────────────────────
- Generate an API key at bitatlas.com/vault/settings (starts with
ba_). - Provide your API key and your 256-bit master key (64 hex chars, derived from your password client-side — never sent to BitAtlas).
- Connect — your agent gets an encrypted vault it can read and write, while the data stays unreadable to everyone but you.
🔒 Client-side AES-256-GCM · 🇪🇺 EU-hosted · 🤝 Zero-knowledge share links
- Hand a file to a human — mint a zero-knowledge share link (
/s/#k=…) whose decryption key rides in the URL fragment and never touches the server - Manage shares — list and revoke share links
Tools (10)
bitatlas_vault_status · bitatlas_list_files · bitatlas_search · bitatlas_get_file · bitatlas_upload_file · bitatlas_delete_file · bitatlas_create_folder · bitatlas_share_file · bitatlas_list_shares · bitatlas_revoke_share
Setup
- Generate an API key at bitatlas.com/vault/settings (starts with
ba_). - Provide your API key and your 256-bit master key (64 hex chars, derived from your password client-side — never sent to BitAtlas).
- Connect — your agent gets an encrypted vault it can read and write, while the data stays unreadable to everyone but you.
🔒 Client-side AES-256-GCM · 🇪🇺 EU-hosted · 🤝 Zero-knowledge share links
Why this copy: it leads with the one-line value prop (SEO + scannability), names the differentiator (zero-knowledge, client-side encryption), lists the concrete tools agents will search for, and makes setup obvious.
How to connect
How to connect BitAtlas to Claude
The server address to paste into Claude settings:
https://bitatlas--bitatlas.run.tools
- Open Claude (claude.ai or the desktop app).
- Go to Settings → Connectors.
- Click Add custom connector.
- Paste the server address copied below into Remote MCP server URL and click Add.
- In a chat, click + → Connectors and switch the new connector on.
Custom connectors are available on Free, Pro, Max, Team and Enterprise plans (Free is limited to one). On Team and Enterprise an organization Owner adds the connector first under Organization settings → Connectors.
Authorization
After you click Add, a sign-in window for the service opens. Sign in with your own account and approve access. Claude never sees your password.
How to connect BitAtlas to ChatGPT
The server address to paste into ChatGPT settings:
https://bitatlas--bitatlas.run.tools
- Open ChatGPT in a browser (chatgpt.com). A Plus, Pro, Business, Enterprise or Edu plan is required.
- Turn on developer mode once: Settings → Apps → Advanced settings → Developer mode.
- Open Settings → Connectors and click Create.
- Fill in the form: Name (anything), Description (one line about what the service does), MCP server URL (copy it below).
- Under Authentication choose OAuth if the service requires sign-in, otherwise None. Click Create.
- In a new chat open + → Apps/Connectors and enable the connector.
OpenAI has renamed this section before (Connectors → Apps/Plugins). If the label differs, search settings for "developer mode". On Business/Enterprise workspaces an admin must allow custom connectors first.
Authorization
On first use ChatGPT opens the service's sign-in window. Sign in and approve access.
How to connect BitAtlas to Cursor
The server address to paste into Cursor settings:
https://bitatlas--bitatlas.run.tools
Fastest: click Open in Cursor below and confirm the prompt.
Manually:
- In Cursor open Settings → Cursor Settings → MCP and click Add new global MCP server.
- Paste the JSON copied below into
~/.cursor/mcp.json(per project:.cursor/mcp.jsonin the repo root). - Save the file. The server appears in the MCP list; authorize it there if asked.
Authorization
If the service needs sign-in, an authorize button appears next to the server in the MCP list.
Server tool list (10)
Raw names from tools/list. Only developers need these.
| bitatlas_vault_status | Get vault health status, file count, and storage usage. |
| bitatlas_list_files | List files in the vault. Optionally filter by folder, category, or search term. |
| bitatlas_search | Search vault files by a query string, optionally narrowed to a category. |
| bitatlas_get_file | Get file metadata and download + decrypt the file content. Returns decrypted content as UTF-8 text for text files, or base64 for binary files. Requires BITATLAS_MASTER_KEY. |
| bitatlas_upload_file | Read a local file, encrypt it client-side with AES-256-GCM, and upload it to the vault. Requires BITATLAS_MASTER_KEY. Files over 100 MB are not supported via MCP. |
| bitatlas_delete_file | Permanently delete a file from the vault. |
| bitatlas_create_folder | Create a new folder in the vault. |
| bitatlas_share_file | Generate a zero-knowledge share link for a vault file, to hand it to a human. The returned link is PUBLIC: ANYONE who has the link can open and read the file. The decryption key is in the URL fragment (#k=...) — BitAtlas never sees it and cannot read the file, but whoever you send the link to can. Confirm with the user before sharing anything sensitive. Requires BITATLAS_MASTER_KEY. |
| bitatlas_list_shares | List the share links you have created, with their expiry, download count, and status. |
| bitatlas_revoke_share | Revoke a share link so the server stops handing out the file. Note: anyone who already downloaded the file keeps it — revocation only stops future downloads. |