Overview
What is Delinea Mcp?
Delinea Mcp is an MCP server for the Delinea Secret Server and Platform APIs. It connects AI assistants (ChatGPT, Claude, Copilot, etc.) to manage secrets, folders, users, groups, and roles, and includes tools for access requests, inbox messages, and report generation.
How to use Delinea Mcp?
Install uv, sync dependencies with uv pip sync requirements.txt, create a config.json with your Secret Server URL and username, set the DELINEA_PASSWORD environment variable, and run uv run server.py --config config.json. For development use python server.py. A Docker image is also available.
Key features of Delinea Mcp
- Automatic authentication against Secret Server
- Tools for folders, secrets, users, groups, and roles
- ChatGPT compatibility tools (search and fetch)
- Optional Delinea Platform user management
- Supports STDIO and SSE transport modes
- OAuth 2.0 with dynamic client registration
- TLS support for secure connections
- Ready-to-run Docker image
Use cases of Delinea Mcp
- Letting ChatGPT approve or deny access requests
- Managing secrets and folders through Claude Desktop
- Running ad‑hoc SQL reports via an AI assistant
- Administering users and groups from openwebui
- Fetching secret credentials in VSCode Copilot
FAQ from Delinea Mcp
What dependencies are required?
Python, uv (recommended), and the packages in requirements.txt. Environment variables for secrets and optional Azure OpenAI or Platform credentials.
How does authentication work?
The server automatically requests a bearer token from Secret Server using a username and password. It also supports OAuth 2.0 with dynamic client registration per the MCP specification.
What transport modes are supported?
STDIO (command line) and Server Sent Events (SSE) over HTTP. Set transport_mode in config.json to "stdio" or "sse".
Can I run Delinea Mcp in Docker?
Yes. A Dockerfile is provided. Build the image and run it with environment variables (DELINEA_PASSWORD, etc.) and a mounted config.json.
What environment variables are required?
DELINEA_PASSWORD (required). Optional: PLATFORM_SERVICE_PASSWORD, AZURE_OPENAI_KEY, and SECRET_USERNAME_<id> / SECRET_PASSWORD_<id> for live testing.
