Volta Notes

What is Volta Notes?

Volta Notes gives your AI agent a secure credential pipeline. Instead of pasting passwords or API keys into chat, you create a burn-after-read note and send the link — the agent reads it once and it's permanently destroyed.

How to use Volta Notes?

Add the @voltanotes/mcp package to your Claude Desktop or Claude Code configuration using the provided npx command. The server exposes two tools: create_volta_note to hand a secret back to the user, and read_volta_note to accept a Volta URL, retrieve and destroy the note, and return the plaintext.

Key features of Volta Notes

• AES-256-GCM encryption runs locally on your machine.
• Decryption key lives in the URL fragment — never transmitted to any server.
• The Volta canister stores only encrypted ciphertext, never plaintext.
• Notes are permanently deleted after being read exactly once.

Use cases of Volta Notes

• An agent creates a one-time URL to securely hand a secret back to the user.
• A user sends a Volta link containing credentials, and the agent reads it without the secret persisting.

FAQ from Volta Notes

How does the security model work?

Encryption (AES-256-GCM) and decryption run entirely on your local machine. The decryption key is embedded in the URL fragment and is never sent to any server. The canister only ever stores and returns encrypted ciphertext.

What tools does Volta Notes provide?

Two tools: create_volta_note to encrypt content and return a one‑time URL, and read_volta_note to accept a Volta URL, retrieve and destroy the note, then decrypt and return the plaintext.

How do I install Volta Notes?

Add the following to your MCP server configuration for Claude Desktop or Claude Code: { "mcpServers": { "volta-notes": { "command": "npx", "args": ["-y", "@voltanotes/mcp"] } } }.

What happens after a note is read?

The note is permanently deleted from the Volta canister. No copy of the plaintext or ciphertext remains on the server.

Where does the data live?

The encrypted ciphertext lives temporarily on the Volta canister. The decryption key exists only in the URL fragment on the client side.