Vault MCP Server

What it does

Vault MCP Server connects AI agents to HashiCorp Vault, enabling them to securely manage secrets, create and delete mounts, and handle PKI certificate issuance without manual intervention.

Tools

• create_mount: Creates a new secret engine mount (KV, PKI, etc.).
• list_mounts: Retrieves all available mounts in the Vault instance.
• write_secret: Stores a secret key and value in a specified KV mount.
• read_secret: Retrieves the value of a secret from a KV mount.
• issue_pki_certificate: Issues a new certificate using a defined PKI role.
• list_secrets: Lists all secrets under a specific path in a KV mount.

Installation

Add the following to your claude_desktop_config.json (ensure VAULT_TOKEN and VAULT_ADDR are set in your environment):

{
  "mcpServers": {
    "vault-mcp-server": {
      "command": "./vault-mcp-server",
      "args": ["stdio"]
    }
  }
}

Supported hosts

Confirmed support for Claude for Desktop, VS Code, and Gemini extensions.