claude-vault-mcp

# MCP-Vault Model Context Protocol (MCP) server for HashiCorp Vault secret management via claude-vault. This MCP server exposes Vault operations as tools that Claude Code can use for AI-assisted secret management, while maintaining the existing security model with human confirmation for write operations. ## Features - ✅ **7 MCP Tools**: Complete Vault operations (login, status, logout, list, get, set, inject) - 🔐 **Security-First**: Human confirmation required for write operations - 📝 **Audit Logging**: All operations logged to `.claude-vault-audit.log` - ⏱️ **Session-Based**: 60-minute token expiry, no persistent credentials - 🛡️ **Input Validation**: Prevents injection attacks and path traversal - 🔍 **Pattern Detection**: Scans for dangerous patterns in secret values ## Architecture ``` User authenticates → VAULT_TOKEN exported → MCP server reads env → Claude uses tools ``` **Security Model:** 1. Human authenticates via OIDC + MFA (`source claude-vault login`) 2. Token stored in environment variables (memory only, 60 min TTL) 3. MCP server reads token from environment 4. Write operations require human to type "yes" 5. All operations audited ## Quick Start ### 1. Installation ```bash cd /path/to/claude-vault/packages/mcp-server # Install in development mode pip install -e . # Or install from PyPI (when published) pip install claude-vault-mcp ``` ### 2. Configure MCP Server (One-time) **Option 1: Use .mcp.json (Project Scope - Recommended)** Copy the example configuration: ```bash # Copy example to your project root cp .mcp.json.example /your/project/.mcp.json # Edit to set your Vault address vim /your/project/.mcp.json ``` Edit `.mcp.json` to point to your claude-vault installation: ```json { "mcpServers": { "claude-vault": { "type": "stdio", "command": "uvx", "args": [ "--from", "/path/to/claude-vault/packages/mcp-server", "claude-vault-mcp" ], "env": { "VAULT_ADDR": "https…