

Encrytion Decryption Toolkit
Core Utility
Available ActionsEach successful request consumes credits as outlined below.
generate5crhash5crhmac5crsign5crencrypt5crdecrypt5cr
Details
This function supports six core actions: generate for creating secure random values in ASCII, BASE64, HEX, or UUID formats with configurable lengths from 4 to 256 characters; hash for computing cryptographic digests using MD5, SHA256, SHA384, SHA512, and SHA3 family algorithms; hmac for generating keyed-hash message authentication codes with a secret key; sign for creating digital signatures using RSA (RS256, RS512) or ECDSA (ES256, ES384, ES512) algorithms with PEM-encoded private keys; and encrypt/decrypt for AES-256-GCM authenticated encryption with support for initialization vectors and optional additional authenticated data. Users can provide input as plain text or base64-encoded binary data, and all cryptographic outputs can be encoded in either hexadecimal or base64 format for flexibility across different system integrations. The toolkit handles the underlying cryptographic complexity while exposing a straightforward interface, making it ideal for agent workflows that require secure token generation, data integrity verification, or sensitive information protection.
Use Cases
Generating secure API keys or access tokens for authentication systems, creating unique UUIDs for database record identifiers, computing file checksums to verify data integrity during transfers, validating webhook payloads by computing and comparing HMAC signatures, signing JWT tokens for stateless authentication in API workflows, encrypting sensitive configuration values or credentials before storage, decrypting stored secrets at runtime for secure credential injection, generating session tokens or one-time codes for user verification flows, creating content hashes for deduplication or caching key generation, signing API requests to third-party services that require cryptographic authentication
Actions(6)
generate5cr3 params(2 required)Generate a cryptographically secure random value in ASCII, BASE64, HEX, or UUID format.
generate5cr3 params(2 required)Generate a cryptographically secure random value in ASCII, BASE64, HEX, or UUID format.
property_namerequiredstringName of the property to write the output to.
generation_typerequiredstringType of value to generate: ASCII, BASE64, HEX, or UUID.
Values:
ASCIIBASE64HEXUUID
lengthintegerLength of the generated value (ignored for UUID). Default: 32.
Default:
32Range: 4 - 256
hash5cr7 params(1 required)Compute a cryptographic hash of text or binary data using MD5, SHA, or SHA3 algorithms.
hash5cr7 params(1 required)Compute a cryptographic hash of text or binary data using MD5, SHA, or SHA3 algorithms.
hash_algorithmrequiredstringHash algorithm to use.
Values:
MD5SHA256SHA384SHA512SHA3-256SHA3-384SHA3-512
valuestringPlain text input to hash. Required unless binary_file is true.
property_namestringOutput property name. Defaults to hash_result.
encodingstringOutput encoding format.
Values:
hexbase64
Default:
hexbinary_filebooleanSet to true to hash binary data from binary_value_base64 instead of text.
Default:
falsebinary_value_base64stringBase64-encoded binary data to hash. Required when binary_file is true.
binary_property_namestringMetadata label for the binary input.
hmac5cr7 params(2 required)Compute a keyed-hash message authentication code (HMAC) using a secret key.
hmac5cr7 params(2 required)Compute a keyed-hash message authentication code (HMAC) using a secret key.
hash_algorithmrequiredstringHash algorithm to use for HMAC.
Values:
MD5SHA256SHA384SHA512SHA3-256SHA3-384SHA3-512
secretrequiredstringSecret key for HMAC computation.
valuestringPlain text input. Required unless binary_file is true.
property_namestringOutput property name. Defaults to hmac_result.
encodingstringOutput encoding format.
Values:
hexbase64
Default:
hexbinary_filebooleanSet to true to use binary data from binary_value_base64.
Default:
falsebinary_value_base64stringBase64-encoded binary data. Required when binary_file is true.
sign5cr5 params(3 required)Create a digital signature using RSA or ECDSA with a PEM-encoded private key.
sign5cr5 params(3 required)Create a digital signature using RSA or ECDSA with a PEM-encoded private key.
valuerequiredstringThe text data to sign.
algorithmrequiredstringSigning algorithm to use.
Values:
RS256RS512ES256ES384ES512
private_keyrequiredstringPEM-encoded private key for signing.
property_namestringOutput property name. Defaults to signature.
encodingstringOutput encoding format.
Values:
hexbase64
Default:
hexencrypt5cr5 params(3 required)Encrypt plaintext using AES-256-GCM authenticated encryption.
encrypt5cr5 params(3 required)Encrypt plaintext using AES-256-GCM authenticated encryption.
valuerequiredstringPlaintext to encrypt.
keyrequiredstring32-byte AES encryption key, encoded as hex or base64.
ivrequiredstring12-byte initialization vector/nonce, encoded as hex or base64.
encodingstringEncoding for key, iv, and output ciphertext.
Values:
hexbase64
Default:
hexaadstringAdditional authenticated data (verified during decryption but not encrypted).
decrypt5cr5 params(3 required)Decrypt AES-256-GCM ciphertext back to plaintext.
decrypt5cr5 params(3 required)Decrypt AES-256-GCM ciphertext back to plaintext.
valuerequiredstringCiphertext to decrypt (hex or base64 encoded).
keyrequiredstring32-byte AES encryption key (same encoding used during encryption).
ivrequiredstring12-byte initialization vector/nonce (same value used during encryption).
encodingstringEncoding for key, iv, and ciphertext.
Values:
hexbase64
Default:
hexaadstringAdditional authenticated data (must match what was used during encryption).
Frequently Asked Questions
How do I connect this tool to an external agent?
You can install the local MCP server by opening a terminal and running:
Install commands
npm install -g @agentpmt/mcp-router
agentpmt-setupThis will connect you to local agents like Claude Code, Windsurf, Grok Build, Cursor, etc.
Alternatively you can connect to the hosted version with this config block, no installation required:
Hosted MCP config
{
"mcpServers": {
"agentpmt": {
"type": "streamable-http",
"url": "https://api.agentpmt.com/mcp",
"headers": {
"Authorization": "Bearer <AGENTPMT_BEARER_TOKEN>",
"x-instance-metadata": "{\"client\":\"generic-mcp\",\"platform\":\"remote\"}"
}
}
}
}View MCP Connection Instructions for more details.
How does an external agent use this tool?
After the external agent is connected to an Agent Group that can use this tool, paste this prompt into the agent:
Agent prompt
Call the AgentPMT-Tool-Search-and-Execution tool with action 'get_schema' and tool_id 695c374f767df5adfd9bc871 ("Encrytion Decryption Toolkit"). Then call the same tool with action 'call_tool', tool_id 695c374f767df5adfd9bc871, and the parameters needed for my request.
The agent should fetch the tool schema first, collect the required parameters for your request, and then call the tool through AgentPMT.





