--- title: "Vault MCP Server: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/vault/ description: "Lets a trusted MCP client operate Vault secrets and mounts using a configured Vault identity." --- # Vault MCP Server: review, setup & limitations · Undominated.ai > Lets a trusted MCP client operate Vault secrets and mounts using a configured Vault identity. [← Explore all mcp servers](/mcp-servers/) SECRETS ADMINISTRATION / HashiCorp # Vault MCP Server Lets a trusted MCP client operate Vault secrets and mounts using a configured Vault identity. See setup guidance ↓Original source ↗ SOURCE REVIEW Reviewed 2026-09-21 Evidence 4 linked sources Publisher HashiCorp Licence MPL-2.0 ↗ Revision 59f51173a0ed Read what was—and wasn’t—checked ↓ “Vault for managing secrets and mounts.” HashiCorp · upstream description ↗ Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Provides an inspectable integration for a specific secrets-management workflow. - The README explicitly identifies secret exposure and limits intended deployments to trusted clients and networks. ### A good fit for - A controlled Vault administration session with a narrowly scoped Vault token. ### Weigh up before choosing - This server can disclose secrets to the client and model; it is unsuitable as a general public MCP endpoint. - CORS origin configuration is not caller authentication or a network allowlist. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - README.md (installation, capability and permission sections) - go.mod - cmd/vault-mcp-server/main.go - LICENSE ### Our findings - VAULT_TOKEN is required, with VAULT_ADDR and optional namespace defining the backend. - The Go entrypoint supports stdio and Streamable HTTP; no read-only guarantee was established from the inspected configuration. ### Not established by this review - Server startup, authentication and tool execution were not tested. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. Upstream setup instructions ↗ - Build or obtain the server using the official setup guide, then configure Vault address, namespace and a limited token. - Use the documented stdio mode with a trusted client, or follow the network/TLS guidance for a controlled HTTP deployment. ### Before you start - A Vault deployment and a Vault token limited to the required paths. ### Compatibility An MCP client supporting stdio, Streamable HTTP. · A Vault deployment and a Vault token limited to the required paths. ### Implementation Go ### Transports stdio · Streamable HTTP ### Secrets administration / Configured credentials or local access - Can read secret material and manage secrets or mounts within the configured Vault policy. ### Cost model Vault hosting, licence and infrastructure terms apply independently of this server’s source licence. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - Official documentation ↗ Checked 2026-09-21 https://github.com/hashicorp/vault-mcp-server/blob/59f51173a0ed60bb2268b97d1a0c0bea9ebde120/README.md Supports: summary, whySelected, bestFor, limitations, install, access, compatibility, transports - Applicable source licence ↗ Checked 2026-09-21 https://github.com/hashicorp/vault-mcp-server/blob/59f51173a0ed60bb2268b97d1a0c0bea9ebde120/LICENSE Supports: license - Implementation: go.mod ↗ Checked 2026-09-21 https://github.com/hashicorp/vault-mcp-server/blob/59f51173a0ed60bb2268b97d1a0c0bea9ebde120/go.mod Supports: language, review - Implementation: cmd/vault-mcp-server/main.go ↗ Checked 2026-09-21 https://github.com/hashicorp/vault-mcp-server/blob/59f51173a0ed60bb2268b97d1a0c0bea9ebde120/cmd/vault-mcp-server/main.go Supports: language, review KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Grafana MCP Server ↗ Connects dashboards, logs, metrics and related Grafana data sources to an assistant, with separate controls for writes and query execution.](/mcp-servers/grafana/)[### Kubernetes MCP Server ↗ Exposes Kubernetes and OpenShift resource inspection and management using kubeconfig or in-cluster credentials.](/mcp-servers/kubernetes/)[### MCP Toolbox for Databases ↗ Serves prebuilt database tools or a configured set of SQL-backed tools and resources to MCP clients.](/mcp-servers/toolbox/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)