Back to Home
mschuchard icon

vault-mcp-server

Verified Safe

by mschuchard

Overview

Provides an interface for managing HashiCorp Vault server resources, including secret engines, authentication engines, audit devices, and ACL policies.

Installation

Run Command
docker run -i --rm -e VAULT_URL=<VAULT SERVER CLUSTER URL> -e VAULT_TOKEN=<VAULT AUTHENTICATION TOKEN> matthewschuchard/vault-mcp-server

Environment Variables

  • VAULT_URL
  • VAULT_TOKEN

Security Notes

The server acts as a client wrapper around the 'hvac' library, which is the official Vault Python client. It explicitly retrieves VAULT_URL and VAULT_TOKEN from environment variables, validating the URL format and applying a regular expression check to the token for valid characters, which helps prevent simple injection. No 'eval', 'exec', 'os.system', or similar dynamic code execution patterns were found. The system relies on Vault's inherent security for policy and certificate parsing.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassMedium
Avg Tokens300
Stars0
Forks0
Last Update2026-01-08

Tags

VaultSecrets ManagementSecurityInfrastructure as CodeAPI Client