Encrypted skills and local MCP

Bukkumaku's Mac app lets an authorised agent search and read skill instructions from your unlocked, encrypted library through a local MCP connection. This interface serves skills. General MCP access to the full library, company-source connectors and customer-record cleanup are product direction previews.

What can an agent read?

A skill contains a name, a description of when to use it, instructions in SKILL.md, and optional supporting text files. Agents can find relevant skills with skill_search and read a selected skill with skill_get.

Search returns skill names, descriptions and identifiers. Reading a skill returns its instructions or a selected supporting file. This interface does not expose unrelated bookmarks, library files or encryption keys.

What do I need?

  • The Bukkumaku Mac desktop app, signed in to the intended account.
  • An unlocked library and a connection to its backend.
  • A compatible agent on the same Mac, configured with the connection details supplied by Bukkumaku.

The local MCP endpoint is http://127.0.0.1:43123/mcp. It requires a private connection token. It is not a public MCP service or a way to bypass library unlock.

Create or import a skill

  1. Open Skills in the library sidebar and select New skill.
  2. Enter a name, when the agent should use it, and the instructions.
  3. Select Save skill.

You can also import a SKILL.md file or a folder with supporting text files. Review the imported content before saving. The supported bundle limit is 100 files and 1 MiB. Scripts are stored as text; importing a script does not execute it. Mobile can read and edit existing skill files. Skill creation and folder import are available on web and desktop.

Connect an agent on your Mac

  1. In Bukkumaku Desktop, open Skills → Connect an agent.
  2. Select the client and reveal its connection settings.
  3. Merge the supplied entry into the client's existing configuration. Preserve its other settings, and keep the connection token private.
  4. Select Install discovery skill, then restart the agent.

The setup supports Claude Code, Codex, Hermes and OpenCode v1. OpenClaw uses mcporter on the same Mac. Use the client-specific settings shown in the app; profiles and client versions can use different configuration locations.

What happens when I lock the library?

Skill reads become unavailable when the library is locked, signed out or closed, or its content is reloading. The local connection token cannot decrypt the library or bypass login. An agent can retain instructions it has already read; locking the library cannot recall that content.

How is the content protected?

Skills use the library's encrypted storage. The Mac app unlocks the library and provides authorised reads to the connected client. The client receives readable instructions. If that client uses a hosted model, its own processing settings and data policy apply to the content it receives.

Do not put passwords or tokens into skill instructions. Keep your recovery key safe. If a connection token is exposed, use Rotate token in the app and update the affected clients with the replacement.

Can I use this for all company information?

The released skills interface and the company-information preview are different scopes. The preview shows collecting sources, processing information, organising views and finding relevant material through MCP. It does not provide a live company import, general library search through MCP or automatic record merging on this website.

For early access, request an invitation. You can also compare the planned Plus and Pro plans. This website does not sell subscriptions or collect payment details.