MCP For Claude Marketplace
HashiCorp Vault

HashiCorp Vault MCP Connector for Claude

F

Securely manage secrets, tokens, and encryption keys via HashiCorp Vault — read KV secrets, generate dynamic credentials, and monitor system health.

50 tools Official Updated Jun 28, 2026 Official Vinkius Partner
More Details Connect to Claude

Connect your HashiCorp Vault instance to any AI agent to automate secrets management and security operations through natural language.

What you can do

  • Secrets Management — Read, write, and list KV secrets directly from your secure mounts using the KV engine.
  • Dynamic Credentials — Generate on-demand credentials for Databases, AWS, and PKI certificates without manual intervention.
  • Token Operations — Create, lookup, and renew tokens to manage session lifecycles and access control.
  • Transit Encryption — Encrypt and decrypt data using Vault's transit engine to protect sensitive information without exposing keys.
  • System Administration — Check cluster health, manage mounts, and configure auth methods or ACL policies directly.

How it works

  1. Subscribe to this server
  2. Provide your Vault Address and Token
  3. Start managing your infrastructure security from Claude, Cursor, or any MCP-compatible client

Who is this for?

  • DevOps Engineers — automate secret rotation and infrastructure provisioning workflows.
  • Security Teams — audit token accessors and manage ACL policies through conversation.
  • Developers — fetch development secrets and generate local database credentials without leaving the IDE.
secrets-managementencryptionkey-managementidentity-accessdynamic-credentialssecurity

50 tools expose this connector's capabilities to your AI agent.

approle_login

Login using AppRole authentication

configure_aws_root

Configure AWS root credentials

configure_database

Configure a database connection

configure_kubernetes_auth

Configure Kubernetes authentication

create_acl_policy

Create or update an ACL policy

create_approle_role

Create or update an AppRole role

create_aws_role

Create an AWS role

create_database_role

Create a database role

create_pki_role

Create a PKI role

create_token

Create a new Vault token

create_transit_key

Create a new Transit key

create_userpass_user

Create a new Userpass user

decrypt_transit

Decrypt data using Transit engine

delete_kv_secret

Delete the latest version of a KV v2 secret

enable_audit_device

Enable an audit device

enable_auth_method

Enable a new auth method

enable_engine

Enable a new secrets engine

encrypt_transit

Encrypt data using Transit engine

generate_approle_secret_id

Generate a new Secret ID for an AppRole

generate_aws_creds

Generate dynamic AWS credentials

generate_database_creds

Generate dynamic database credentials

generate_pki_root

Generate a new PKI root certificate

get_init_status

Check Vault initialization status

get_openapi_spec

Generate OpenAPI V3 document of mounted backends

get_system_health

Check Vault system health

github_login

Login using GitHub personal access token

initialize_vault

Initialize a new Vault cluster

issue_pki_cert

Issue a new PKI certificate

kubernetes_login

Login using Kubernetes authentication

list_acl_policies

List ACL policies

list_audit_devices

List enabled audit devices

list_auth_methods

List enabled auth methods

list_kv_secrets

List secrets in a KV v2 engine path

list_mounts

List mounted secrets engines

list_token_accessors

List token accessors (requires sudo)

lookup_lease

Lookup a lease by ID

lookup_self_token

Lookup details about the current Vault token

map_github_team

Map a GitHub team to Vault policies

read_kv_metadata

Read metadata for a KV v2 secret

read_kv_secret

Read a secret from KV v2 engine

renew_lease

Renew a lease

renew_self_token

Renew the current Vault token

revoke_lease

Revoke a lease

revoke_pki_cert

Revoke a PKI certificate

revoke_self_token

Revoke the current Vault token

rotate_transit_key

Rotate a Transit key

seal_vault

Seal the Vault

unseal_vault

Unseal the Vault with a key share

userpass_login

Login using Username and Password

write_kv_secret

Create or update a secret in KV v2 engine

See how to talk to your AI agent using HashiCorp Vault.

Check the health and initialization status of my Vault server.

I've checked the system. The Vault server is initialized and unsealed. Health check returned 200 OK with version 1.15.2.

Read the secret stored at 'secret/data/production/api-keys'.

I've retrieved the secret. It contains 2 keys: `STRIPE_KEY` and `AWS_SECRET_ACCESS_KEY`. Would you like me to display the values?

Renew my current Vault token for another hour.

The token has been successfully renewed. The new lease duration is 3600 seconds.

Yes. Use the `lookup_self_token` tool. It returns the creation time, TTL, associated policies, and metadata for the token currently in use.

Related Connectors

SA

Salesforce MCP

12 tools Official

Connect your Salesforce CRM to any AI agent — query records with SOQL, manage accounts, contacts, opportunities, run reports, and perform CRUD operations.

A+ View details →
JU

JumpCloud MCP

10 tools Official

Manage users, systems, and directories via JumpCloud API.

A+ View details →
MY

MYOB MCP

23 tools Official

Automate accounting and sales management via MYOB — list GL accounts, journal transactions, invoices, and customer payments directly from any AI agent.

A+ View details →
BL

BLS Local — LAUS State & County Unemployment MCP

1 tools Official

Explore the Local Area Unemployment Statistics (LAUS) program. Get granular unemployment insights spanning across every US State, County, and Metropolitan Area.

F View details →