{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_y4sdefx8adzd","handle":"claude-vault-mcp","url":"https://wellknown.network/agents/claude-vault-mcp","links":{"self":"https://wellknown.network/agents/claude-vault-mcp/record.json","html":"https://wellknown.network/agents/claude-vault-mcp","markdown":"https://wellknown.network/agents/claude-vault-mcp/record.md","api":"https://wellknown.network/api/v1/agents/claude-vault-mcp","status":"https://wellknown.network/api/v1/agents/claude-vault-mcp/status","claim":"https://wellknown.network/agents/claude-vault-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/claude-vault-mcp/claim.json","badge":"https://wellknown.network/agents/claude-vault-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:claude-vault-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"claude-vault-mcp","summary":"MCP server for HashiCorp Vault secret management via claude-vault","description":"# MCP-Vault\n\nModel Context Protocol (MCP) server for HashiCorp Vault secret management via claude-vault.\n\nThis MCP server exposes Vault operations as tools that Claude Code can use for AI-assisted secret management, while maintaining the existing security model with human confirmation for write operations.\n\n## Features\n\n- ✅ **7 MCP Tools**: Complete Vault operations (login, status, logout, list, get, set, inject)\n- 🔐 **Security-First**: Human confirmation required for write operations\n- 📝 **Audit Logging**: All operations logged to `.claude-vault-audit.log`\n- ⏱️ **Session-Based**: 60-minute token expiry, no persistent credentials\n- 🛡️ **Input Validation**: Prevents injection attacks and path traversal\n- 🔍 **Pattern Detection**: Scans for dangerous patterns in secret values\n\n## Architecture\n\n```\nUser authenticates → VAULT_TOKEN exported → MCP server reads env → Claude uses tools\n```\n\n**Security Model:**\n1. Human authenticates via OIDC + MFA (`source claude-vault login`)\n2. Token stored in environment variables (memory only, 60 min TTL)\n3. MCP server reads token from environment\n4. Write operations require human to type \"yes\"\n5. All operations audited\n\n## Quick Start\n\n### 1. Installation\n\n```bash\ncd /path/to/claude-vault/packages/mcp-server\n\n# Install in development mode\npip install -e .\n\n# Or install from PyPI (when published)\npip install claude-vault-mcp\n```\n\n### 2. Configure MCP Server (One-time)\n\n**Option 1: Use .mcp.json (Project Scope - Recommended)**\n\nCopy the example configuration:\n\n```bash\n# Copy example to your project root\ncp .mcp.json.example /your/project/.mcp.json\n\n# Edit to set your Vault address\nvim /your/project/.mcp.json\n```\n\nEdit `.mcp.json` to point to your claude-vault installation:\n\n```json\n{\n  \"mcpServers\": {\n    \"claude-vault\": {\n      \"type\": \"stdio\",\n      \"command\": \"uvx\",\n      \"args\": [\n        \"--from\",\n        \"/path/to/claude-vault/packages/mcp-server\",\n        \"claude-vault-mcp\"\n      ],\n      \"env\": {\n        \"VAULT_ADDR\": \"https…","publisher":null,"homepage":"https://github.com/weber8thomas/claude-vault#readme","repository":"https://github.com/weber8thomas/claude-vault#readme","version":"1.4.0","license":"MIT","protocols":["mcp"],"tags":["ai","claude","mcp","secrets","security","vault","webauthn"],"pricing":null,"endpoints":[{"url":"pypi:claude-vault-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"security.secrets","name":"Secrets Management","confidence":1,"provenance":"declared"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.768,"provenance":"derived"}],"categories":["dev","security"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"claude-vault-mcp","registry":"pypi","observedAt":"2026-09-09T11:35:22.477Z","publishedAt":"2025-12-16T23:40:45.673488Z","latestVersion":"1.4.0"}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"claude-vault-mcp","url":"https://pypi.org/project/claude-vault-mcp/","firstSeenAt":"2026-09-09T11:30:54.116Z","fetchedAt":"2026-09-09T11:30:54.116Z","normalizedAt":"2026-09-09T11:30:54.116Z"}]},"firstSeenAt":"2026-09-09T11:30:54.116Z","updatedAt":"2026-09-09T11:35:22.477Z"}