{"id":27316927,"url":"https://github.com/mschuchard/vault-mcp-server","last_synced_at":"2026-04-28T08:05:12.847Z","repository":{"id":287457557,"uuid":"964141634","full_name":"mschuchard/vault-mcp-server","owner":"mschuchard","description":"The third-party FOSS MCP server for Vault","archived":false,"fork":false,"pushed_at":"2026-04-13T21:27:51.000Z","size":184,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-04-13T23:27:53.977Z","etag":null,"topics":["mcp","mcp-server","vault","vault-plugin"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mschuchard.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-04-10T18:49:17.000Z","updated_at":"2026-04-13T21:27:55.000Z","dependencies_parsed_at":"2025-04-11T21:23:44.440Z","dependency_job_id":"eca5dbbb-d957-4240-9e95-04f5a58d7796","html_url":"https://github.com/mschuchard/vault-mcp-server","commit_stats":null,"previous_names":["mschuchard/vault-mcp-server"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/mschuchard/vault-mcp-server","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mschuchard%2Fvault-mcp-server","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mschuchard%2Fvault-mcp-server/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mschuchard%2Fvault-mcp-server/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mschuchard%2Fvault-mcp-server/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mschuchard","download_url":"https://codeload.github.com/mschuchard/vault-mcp-server/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mschuchard%2Fvault-mcp-server/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32371709,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-27T20:07:02.737Z","status":"online","status_checked_at":"2026-04-28T02:00:07.250Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["mcp","mcp-server","vault","vault-plugin"],"created_at":"2025-04-12T08:39:00.150Z","updated_at":"2026-04-28T08:05:12.810Z","avatar_url":"https://github.com/mschuchard.png","language":"Python","funding_links":[],"categories":["🤖 AI/ML"],"sub_categories":[],"readme":"# Vault MCP Server\n\nThere is now an official Vault MCP Server from Hashicorp. Therefore, the alternative third-party Vault MCP Server will continue to exist and be updated with features and fixes, but no attempt will be made to compete with the official product. The third-party Vault MCP Server can be executed locally instead of only remotely (although in many situations remote is preferable), and will continue to be available as a container image.\n\nDue to this policy enacted because of the official product release, there will be no formal release process, versioning, or changelog. This product is also not recommended for enterprise production usage.\n\nThe MCP Server container image is hosted at [Dockerhub](https://hub.docker.com/r/matthewschuchard/vault-mcp-server), and it represents the code hosted here at `HEAD`.\n\n## Desktop Configs\n\nThese can hopefully be extrapolated and modified to fit other clients if you want to play with this server for whatever reason.\n\n**Claude**\n```json\n{\n  \"mcpServers\": {\n    \"vault\": {\n      \"command\": \"docker\",\n      \"args\": [\n        \"run\",\n        \"-i\",\n        \"--rm\",\n        \"-e\",\n        \"VAULT_URL\",\n        \"-e\",\n        \"VAULT_TOKEN\",\n        \"-e\",\n        \"CACHE_TTL\",\n        \"matthewschuchard/vault-mcp-server\"\n      ],\n      \"env\": {\n        \"VAULT_URL\": \"\u003cVAULT SERVER CLUSTER URL\u003e\",\n        \"VAULT_TOKEN\": \"\u003cVAULT AUTHENTICATION TOKEN\u003e\",\n        \"CACHE_TTL\": \"\u003cCACHE TTL FOR READ/LIST OPERATIONS\u003e\"\n      }\n    }\n  }\n}\n```\n\n**VSCode**\n\nThe `MCP: Add Server --\u003e Docker Image` command can also streamline this configuration. The values below can be entered into the input prompts, and then the `mcp.json` file is automically opened within a pane afterward for further updates if necessary.\n```json\n{\n  \"servers\": {\n    \"vault\": {\n      \"type\": \"stdio\",\n      \"command\": \"docker\",\n      \"args\": [\n        \"run\",\n        \"-i\",\n        \"--rm\",\n        \"-e\",\n        \"VAULT_URL\",\n        \"-e\",\n        \"VAULT_TOKEN\",\n        \"-e\",\n        \"CACHE_TTL\",\n        \"matthewschuchard/vault-mcp-server\"\n      ],\n      \"env\": {\n        \"VAULT_URL\": \"\u003cVAULT SERVER CLUSTER URL\u003e\",\n        \"VAULT_TOKEN\": \"\u003cVAULT AUTHENTICATION TOKEN\u003e\",\n        \"CACHE_TTL\": \"\u003cCACHE TTL FOR READ/LIST OPERATIONS\u003e\"\n      }\n    }\n  }\n}\n```\n\nNote that `CACHE_TTL` is an optional environment variable that establishes the cache time for all read and list operations before new value(s) are retrieved instead of using the cached value. The default value is sixty (60) seconds.\n\n## Features\n\n### Resources\n- Current Enabled ACL Policies\n- Current Enabled Audit Devices\n- Current Enabled Authentication Engines\n- Current Enabled Secret Engines\n- Current Raft Cluster Configuration\n\n### Tools\n- System Backend\n  - ACL Policies\n  - Audit Devices\n  - Authentication Engines\n  - Raft (Clustering and Storage Snapshots)\n  - Secrets Engines\n- Secrets Backend\n  - Database (Beta)\n  - KV Version 2\n  - PKI\n  - Transit\n\n### Prompts\n- mcp.vault.example-acl-policy: This displays an example Vault ACL Policy in JSON string format. The displayed policy can be modified and entered as-is to the LLM (verified with Claude), and it will understand that you want to create an ACL Policy through the Vault MCP Server with your modified content (with an auto-generated name). However, it is probably more prudent to use it as an input to the tool instead.\n- mcp.vault.generate-acl-policy: This displays a pseudo-example Vault ACL Policy in JSON string format similar to the above prompt. The primary difference is that this prompt accepts a `paths` argument in `list[str]` type format, and the returned policy will contain the input paths. However, the `capabilities` will still be boilerplate, and need to be modified for your usage.\n- mcp.vault.generate-smart-acl-policy: This is an experimental interactive workflow with an agentic LLM to create and optimize a Vault ACL policy based on user requirements and prompts. It will also return the policy in JSON string format.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmschuchard%2Fvault-mcp-server","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmschuchard%2Fvault-mcp-server","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmschuchard%2Fvault-mcp-server/lists"}