SECRETS ADMINISTRATION / HashiCorp
Vault MCP Server
Lets a trusted MCP client operate Vault secrets and mounts using a configured Vault identity.
“Vault for managing secrets and mounts.”
01 / THE REASONING
Why this made the selection.
- Provides an inspectable integration for a specific secrets-management workflow.
- The README explicitly identifies secret exposure and limits intended deployments to trusted clients and networks.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- README.md (installation, capability and permission sections)
- go.mod
- cmd/vault-mcp-server/main.go
- LICENSE
Our findings
- VAULT_TOKEN is required, with VAULT_ADDR and optional namespace defining the backend.
- The Go entrypoint supports stdio and Streamable HTTP; no read-only guarantee was established from the inspected configuration.
Not established by this review
- Server startup, authentication and tool execution were not tested.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Connect a server deliberately.
- Build or obtain the server using the official setup guide, then configure Vault address, namespace and a limited token.
- Use the documented stdio mode with a trusted client, or follow the network/TLS guidance for a controlled HTTP deployment.
Before you start
- A Vault deployment and a Vault token limited to the required paths.
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
- Official documentation ↗Checked
https://github.com/hashicorp/vault-mcp-server/blob/59f51173a0ed60bb2268b97d1a0c0bea9ebde120/README.md
Supports: summary, whySelected, bestFor, limitations, install, access, compatibility, transports
- Applicable source licence ↗Checked
https://github.com/hashicorp/vault-mcp-server/blob/59f51173a0ed60bb2268b97d1a0c0bea9ebde120/LICENSE
Supports: license
- Implementation: go.mod ↗Checked
https://github.com/hashicorp/vault-mcp-server/blob/59f51173a0ed60bb2268b97d1a0c0bea9ebde120/go.mod
Supports: language, review
https://github.com/hashicorp/vault-mcp-server/blob/59f51173a0ed60bb2268b97d1a0c0bea9ebde120/cmd/vault-mcp-server/main.go
Supports: language, review