Omniseal for VS Code / GitHub Copilot

Seal, retrieve, verify, and remove hidden files using PureCipher Omniseal.

Install

code --install-extension omniseal-1.0.0.vsix

Download the VSIX from this repository's Releases page first, then install it with the command above or VS Code's Extensions: Install from VSIX command. Requires VS Code 1.102 or newer and access to GitHub Copilot chat agent mode.

Open MCP: List Servers, select Omniseal, and start the server. Review the server trust prompt. In Copilot Chat, use agent mode and enable the Omniseal tools. Try: "Use Omniseal to verify the public demo file at https://api.purecipher.com/fixtures/review-sealed.png with filename review-sealed.png." No PureCipher account or API key is required for the current public endpoint.

Tools

seal_files: conceal a secret file inside a supported cover.
retrieve_secret_file: recover the hidden file using its private seed.
verify_sealed_file: check seal integrity, without a seed.
remove_hidden_file: create a new clean cover using the private seed.

Original input files are preserved. This repository contains the VS Code extension configuration and instructions. The hosted service executes the Omniseal SDK.

Inputs and output limits

Each file argument contains file_name and exactly one of download_url (a service-reachable HTTPS URL) or content_base64 (exact file bytes). Local paths and Copilot chat attachments are not automatically uploaded.

Selected file contents and the operation seed are processed by PureCipher's hosted service. Use an Omniseal seed, never an account password or API credential. Inputs are limited to 6 MB per file and 10 MB combined for sealing. Responses are limited to 140,000 serialized characters, typically about 100 KB of output bytes. Outputs are binary MCP resources, not hosted download links. Client-side binary rendering and saving have not yet been verified end to end.

The service URL is https://api.purecipher.com/mcp?platform=claude. The query selects the existing compatible file schema; it does not send files to Anthropic. The service is publicly reachable and requires no authentication.

Privacy and permissions

This extension registers one remote MCP server. It does not scan the workspace, automatically upload files, store seeds, or change tool approval settings. The host controls server trust and tool invocation. Review file arguments before sending them to the public service. Copilot account access is separate from Omniseal's no-auth demo endpoint.

Support

Omniseal
Privacy policy
Terms
Email: support@purecipher.com

Omniseal for GitHub Copilot