What is Vaulted MCP Server?
Vaulted MCP Server lets AI agents share encrypted, self‑destructing secrets via zero‑knowledge E2E encryption (AES‑256‑GCM). It integrates with any MCP‑compatible host (Claude Desktop, Cursor, Windsurf, etc.) and supports agent‑blind input – the LLM never sees the actual secret value.
How to use Vaulted MCP Server?
Run npx -y @vaulted/mcp-server or install globally with npm install -g @vaulted/mcp-server and then run vaulted-mcp-server. Add the server to your MCP host’s config file (e.g., claude_desktop_config.json, .cursor/mcp.json, windsurf/mcp_config.json) using the provided JSON snippet. Optional flags include --base-url for a self‑hosted API and --allowed-dirs to extend accessible file directories.
Key features of Vaulted MCP Server
- Zero‑knowledge E2E encryption (AES‑256‑GCM, key never sent to server)
- Agent‑blind input: env vars, files, and .env keys resolved locally
- Four tools:
create_secret, view_secret, check_status, list_secrets
- Local history with live status tracking
- Works with Claude Desktop, Cursor, Windsurf, Claude Code, VS Code
Use cases of Vaulted MCP Server
- Share API keys, tokens, or passwords via self‑destructing links from within an AI chat
- Expose environment variables or file contents to another person without the LLM ever seeing the value
- Monitor whether a shared secret has been viewed and how many times it has been consumed
- Securely transfer credentials to a teammate without exposing them in chat history
评论