Vault MCP Server

@mschuchard

代码仓库

基本信息

分类

开发工具

许可证

MIT

传输方式

stdio

作者

mschuchard

关于 Vault MCP Server

The third-party FOSS MCP server for Vault

#vault #mcp#vault-plugin#mcp-server

Vault MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "vault": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "VAULT_URL",
        "-e",
        "VAULT_TOKEN",
        "matthewschuchard/vault-mcp-server"
      ],
      "env": {
        "VAULT_URL": "<VAULT SERVER CLUSTER URL>",
        "VAULT_TOKEN": "<VAULT AUTHENTICATION TOKEN>"
      }
    }
  }
}

Vault MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Vault MCP Server?

Vault MCP Server is a third-party MCP server that integrates with HashiCorp Vault, providing tools and resources for managing Vault through MCP-compatible clients. It can be executed locally or remotely via Docker. It is not recommended for enterprise production usage.

How to use Vault MCP Server?

Configure the server as a Docker container in desktop MCP clients like Claude or VSCode. Set environment variables for Vault connection (e.g., VAULT_URL, VAULT_TOKEN, VAULT_AUTH_METHOD) and pass them to the container. Example configuration files are provided for Claude and VSCode.

Key features of Vault MCP Server

5 resources: ACL policies, audit devices, auth engines, secret engines, Raft cluster config.
138 tools covering system and secrets backends.
4 prompts for ACL policy generation and Vault diagnostics.
Supports token, userpass, and approle authentication methods.
Configurable cache TTL for read/list operations.
Container image available on Dockerhub.

Use cases of Vault MCP Server

Automating Vault ACL policy creation and optimization via LLM.
Diagnosing Vault server state and configuration deficiencies.
Interacting with KV v2, PKI, Transit, and database secrets engines.
Managing Vault system backend operations (audit, auth, Raft, etc.).

常见问题

How does this server differ from the official HashiCorp Vault MCP Server?

This is a third-party alternative that can be executed locally (not only remotely) and continues to be updated, but is not recommended for enterprise production. The official server is from HashiCorp.

What are the runtime requirements?

The server runs as a Docker container. You must provide environment variables for Vault connection (e.g., `VAULT_URL`, `VAULT_TOKEN`, `VAULT_AUTH_METHOD`).

How do I authenticate to Vault?

Set the `VAULT_AUTH_METHOD` environment variable to `token`, `userpass`, or `approle`. Provide the corresponding credentials (e.g., `VAULT_TOKEN`, `VAULT_USERNAME`/`VAULT_PASSWORD`, `VAULT_ROLE_ID`/`VAULT_SECRET_ID`).

Does this server have a formal release process?

No. There is no formal release process, versioning, or changelog. The container image always represents the code at `HEAD`.

Where is the container image hosted?

The container image is hosted on Dockerhub at `matthewschuchard/vault-mcp-server`.

开发工具分类下的更多 MCP 服务器

Ramen

bkraad47

Multi-zone MCP server for GKE/EKS/AKS: Python tools from git, NeMo guardrails, SSO, autoscaling.

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

Vibgrate MCP

Vibgrate

Query your team's drift, vulnerability, and migration data from any AI assistant. Vibgrate MCP connects Cursor, Claude, ChatGPT, Windsurf, or VS Code to Vibgrate Cloud: 51 tools for DriftScores, CVEs and EOL runtimes, up

Meticulous

Capgo MCP

Cap-go

Console, Backend and CLI to manage Capgo Instant update and Native build for Capacitor apps Build and upload to app store your mobile app