---
title: "Deploy Encryptor MCP"
description: "Your Cryptomator vaults for AI agents. You hold the keys."
category: "AI/ML"
url: https://railway.com/deploy/encryptor-mcp
---

# Deploy Encryptor MCP

Your Cryptomator vaults for AI agents. You hold the keys.

**[Deploy Encryptor MCP on Railway](https://railway.com/template/encryptor-mcp)**

Machine-readable deploy manifest (JSON, validated by TemplateCI): https://railway.com/deploy/encryptor-mcp/manifest.json

- **Creator:** s17sh70x2jfl031ag
- **Category:** AI/ML

## Template content

### Encryptor-MCP https://raw.githubusercontent.com/s17sh70x2jfl031ag/Encryptor-MCP/main/docs/images/icon.png

- **Source:** s17sh70x2jfl031ag/Encryptor-MCP
- **Health check:** /health
- **Public domain:** Yes

## Documentation

# Deploy and Host Encryptor MCP on Railway

Encryptor MCP opens Cryptomator vaults for AI apps and agents like Claude, ChatGPT and Cursor, over MCP. You unlock each vault yourself on a page in your browser, so the password never goes through the chat. Keys live only in memory, vaults lock by themselves, and every change the AI makes can be undone. Free and open source (AGPL-3.0). Works with Cryptomator vaults; not made by or affiliated with Cryptomator.

## About Hosting Encryptor MCP

This template builds Encryptor MCP from its GitHub repository and runs it as a web server with HTTPS. You choose a passphrase: it locks your control center, and AI apps ask for it once when they connect. A volume at /data keeps your vaults, settings and connected apps across restarts. Important: while a vault is open, its keys live in the memory of this Railway server, and vaults created here live on its volume (they don't sync with your other devices). If you can, run it on your own computer or a server you control instead. Full guide: https://github.com/s17sh70x2jfl031ag/Encryptor-MCP/blob/main/docs/setup-hosting.md

## Common Use Cases

- Let Claude or ChatGPT on your phone read and update files in an encrypted vault
- Keep private notes, receipts or documents encrypted while an AI agent works with them
- Give each AI app only the vaults it needs, read only or with changes

## Dependencies for Encryptor MCP Hosting

- A passphrase of 8 or more characters (LOGIN_PASSPHRASE)
- A volume mounted at /data (included in this template)

### Implementation Details

After it deploys, open the public address and sign in with your passphrase. Create a vault under Settings (folder /data/vaults/NAME), then connect your AI app to https://YOUR-ADDRESS/mcp. Check it works: /health says ok.

## Why Deploy Encryptor MCP on Railway?

Railway is a singular platform to deploy your infrastructure stack. Railway will host your infrastructure so you don't have to deal with configuration, while allowing you to vertically and horizontally scale it.

By deploying Encryptor MCP on Railway, you are one step closer to supporting a complete full-stack application with minimal burden. Host your servers, databases, AI agents, and more on Railway.

## Similar templates

- [Chat Chat](https://railway.com/deploy/-WWW5r) — Chat Chat, your own unified chat and search to AI platform.
- [stella](https://railway.com/deploy/stella) — Self-host stella with web, API, Postgres, Redis, and object storage.
- [Hermes Agent | OpenClaw Alternative with Dashboard](https://railway.com/deploy/hermes-agent-or-openclaw-alternative-wit) — Self-Hosted Hermes AI Agent for Telegram, Discord & Slack

Open this page in a browser: https://railway.com/deploy/encryptor-mcp