MCP server

Vault

MCP

Official HashiCorp Vault MCP. Secrets, not a leaked .env.

hashicorp/vault-mcp-server. Read and write against the Vault you point at, with the token you already rotate.

latest·MPL-2.0·Updated this quarter·github.com/hashicorp/vault-mcp-server·Transport: stdio

Claude CodeCursorVS CodeDesktop

ScannedActive

claude_desktop_config.json

{
  "mcpServers": {
    "vault": {
      "command": "npx",
      "args": [
        "-y",
        "@hashicorp/vault-mcp-server"
      ],
      "env": {
        "VAULT_ADDR": "https://…",
        "VAULT_TOKEN": "…"
      }
    }
  }
}

By HashiCorp

Spec

What the server actually exposes.

list_secrets
read
Keys under a path.
read_secret
read
A secret the token can see.
write_secret
write
Write after you confirm.

Tool	Does	Access
list_secrets	Keys under a path.	read
read_secret	A secret the token can see.	read
write_secret	Write after you confirm.	write

Guardrails

Credentials stay in env
Read-first unless a write tool is called
Official package, not a wrapper

vault-mcp.mcp/tools

Tools

list_secrets
Keys under a path.
read
read_secret
A secret the token can see.
read
write_secret
Write after you confirm.
write

Last call

{ "ok": true,
  "tool": "list_secrets",
  "rows": 12 }

Maker

HashiCorp

@hashicorp · Company

All mcps

Other servers worth installing

Discussion

No notes yet. Be the first hunter to report back.