[{"_1":2,"_400":-5,"_401":-5},"loaderData",{"_3":4,"_22":23,"_308":309},"root",{"_5":6,"_7":8},"toasts",[],"visitor",{"_9":10,"_11":12},"viewportWidth",1280,"visitorSession",{"_13":14,"_16":17,"_18":-5,"_19":20,"_21":-5},"attributes",[15],"bot","id",16246667,"membership","referenceId","01996c17-eef2-7208-aa1b-bc546c003f59","userAccount","routes/_public/mcp/servers/~namespace/~slug/_pages/_layout",{"_24":25,"_26":-5,"_27":28,"_29":40,"_226":227,"_307":212},"availableLocales",[],"githubUser","locale",{"_29":30,"_33":37,"_38":39},"mcpServer",{"_31":32,"_33":34,"_35":36},"description","Enables secure management of agent-scoped secrets in HashiCorp Vault through MCP protocol. Provides per-agent namespacing, multiple authentication methods (API key, JWT, mTLS), and optional encryption/decryption capabilities with built-in rate limiting.","name","Vault MCP Bridge","readme","Vault MCP Bridge\n\nOverview\n- FastAPI MCP-compatible server that manages agent-scoped secrets and crypto via HashiCorp Vault.\n- Auth: API Key, JWT (HS256 and RS256/JWKS), and mTLS via reverse-proxy headers.\n- Per-agent namespacing in KV v2; Transit support (encrypt/decrypt/sign/verify/rewrap/random).\n- Optional per-request child token issuance bound to per-agent policies; simple per-agent rate limiting.\n- Prometheus metrics at `/metrics` and optional OpenTelemetry tracing.\n\nQuickstart\n- Python env:\n - `python3 -m venv .venv && source .venv/bin/activate`\n - `python -m pip install -r requirements.txt`\n- Start local Vault (dev) for testing:\n - `cd local-vault && docker compose up -d && cd ..`\n - This provisions KV v2 at `secret/`, a Transit key, and example policies. See `local-vault/README.md`.\n- Run server:\n - Easiest: `python main.py` (env: `HOST=0.0.0.0 PORT=8089 RELOAD=true LOG_LEVEL=debug`)\n - Or: `python -m uvicorn main:app --reload`\n - Or factory: `python -m uvicorn vault_mcp.app:create_app --factory --reload`\n- Helper: `scripts/run_dev_jwt.sh` starts the app with Vault + JWT defaults (no manual env export).\n- Sanity checks:\n - `curl http://127.0.0.1:8089/healthz`\n - `bash scripts/smoke.sh` (expects local Vault and default dev auth)\n- Vault access (required before running the server):\n - Set credentials so the app can authenticate to Vault, e.g. for the bundled dev compose stack:\n ```bash\n export VAULT_ADDR=http://127.0.0.1:8200\n export VAULT_TOKEN=root # replace with your own token or AppRole\n ```\n - Without these env vars (or the AppRole equivalents) `/readyz` will return 503 and observability/secret routes will be unauthorized.\n - To avoid re-exporting each run you can `source config/dev-jwt.env` (new sample file) before launching, or use `scripts/run_dev_jwt.sh` which applies the same defaults automatically.\n- Optional admin UI:\n - `python3 -m venv .ui-venv && source .ui-venv/bin/activate`\n - `pip install -r ui/requirements.txt`\n - `streamlit run ui/streamlit_app.py`\n - Use the **Manage Subjects & Keys** page to manage `config/users.json`, rotate credentials, and sync profiles to the sidebar.\n - JWT helpers in the UI require `JWT_HS256_SECRET` to be set before launch (e.g., `source config/dev-jwt.env` or run `scripts/run_dev_jwt.sh`).\n - Use **AWS KMS Operations** to supply temporary AWS credentials (if needed) and call encrypt/decrypt, data-key, sign, and verify APIs.\n\nJWT quickstart (HS256):\n- Install helper deps: `pip install 'python-jose[cryptography]'`\n- Generate a token with the bundled script (adjust subject/scopes as needed):\n - ```\n python scripts/gen_jwt.py \\\n --secret dev-secret \\\n --issuer mcp-auth \\\n --audience mcp-agents \\\n --sub agent_api \\\n --scopes read,write,delete,list \\\n --ttl 600\n ```\n- Use the printed value as the `Authorization: Bearer ` header when calling the API or configuring the Streamlit console.\n\nFeatures\n- KV v2 secret CRUD with per-agent prefixes and safe pathing.\n- Transit: encrypt/decrypt, sign/verify, rewrap, and random bytes (base64/hex).\n- AWS KMS (optional): encrypt/decrypt, generate data keys, and sign/verify with native AWS keys.\n- Database: dynamic credentials issuance and lease management.\n- SSH: OTP credential and SSH certificate signing.\n- Auth: API Key, JWT (HS256 or RS256 via JWKS), mTLS via headers.\n- Child tokens per request (optional); per-agent in-memory rate limiting.\n- MCP: JSON-RPC over HTTP at `POST /mcp/rpc` (with `GET /mcp/sse` keepalive channel) and stdio transport via `scripts/mcp_stdio.py`.\n- Streamlit operations hub: Vault Operations covers Secrets, Transit, Database, SSH, and MCP tools, while a dedicated AWS KMS page lets you enter temporary AWS credentials and invoke encrypt/decrypt, data-key, and signing APIs.\n- Streamlit agent admin: create multiple AI agent profiles, toggle LLM usage, assign credentials (linked user/API key/JWT), define tasks, capture a `secrets_backend` plan (Vault/KMS/Hybrid), and monitor progress/status.\n- MCP lifecycle: `initialize`, `tools/list`, `resources/list`, `prompts/list`, `tools/call`, `shutdown`. Protocol version: `2025-06-18`.\n- Tools exposed (with required scopes):\n - KV: `kv.read` (read, supports `version`), `kv.write` (write), `kv.list` (list), `kv.delete` (delete), `kv.undelete` (write), `kv.destroy` (write)\n - Transit: `transit.encrypt` (write), `transit.decrypt` (read), `transit.sign` (write), `transit.verify` (read), `transit.rewrap` (write), `transit.random` (read)\n - DB: `db.issue_creds` (write), `db.renew` (write), `db.revoke` (write)\n - SSH: `ssh.otp` (write), `ssh.sign` (write)\n - KMS: `kms.encrypt` (write), `kms.decrypt` (read), `kms.generate_data_key` (write), `kms.sign` (write), `kms.verify` (read)\n- Observability endpoints: `/observability/summary` (Vault/API status + in-flight requests) and `/observability/logs/{requests|responses|server}` (tail JSON logs, read scope required).\n- Metrics at `/metrics`; optional OpenTelemetry via OTLP HTTP exporter.\n\nResources\n- Scheme `kv://{subject}/{path}` with optional `?version=N`.\n- `resources/list`: advertises `kv://{subject}/` (KV root) for the authenticated subject.\n- `resources/get`:\n - `kv://{subject}/foo/bar` returns `{ data, version }` (JSON) for that KV path.\n - `kv://{subject}/foo/` (trailing slash) returns `{ keys: [...] }` listing under that prefix.\n - Cross-subject access is forbidden.\n\nPrompts\n- `prompts/list`: returns prompt specs for `kv_read` and `kv_write` with input schemas.\n- `prompts/get`:\n - `kv_read`: returns example `messages` and a `suggested_tool` call for `kv.read`.\n - `kv_write`: returns example `messages` and a `suggested_tool` call for `kv.write`.\n\nConfiguration (env)\n- Vault:\n - `VAULT_ADDR` (default: http://localhost:8200)\n - `VAULT_NAMESPACE` (Enterprise only)\n - `VAULT_TOKEN` or `VAULT_ROLE_ID` + `VAULT_SECRET_ID`\n - `KV_MOUNT` (default: secret)\n - `DEFAULT_PREFIX` (default: mcp)\n- Config file (optional, no .env needed):\n - Set `APP_CONFIG_FILE` to a JSON/TOML/YAML file path. Example defaults auto-detected from CWD: `config.toml`, `config.json`, `config.yaml`.\n - Environment variables always override file values.\n - Note: `.env` files are not auto-loaded anymore.\n - Precedence: runtime args (where applicable) → environment variables → `APP_CONFIG_FILE`/auto-detected config → built-in defaults.\n- Auth enable flags:\n - `AUTH_API_KEY_ENABLED` (default: true)\n - `AUTH_JWT_ENABLED` (default: true)\n - `AUTH_MTLS_ENABLED` (default: false)\n - CLI helper: `scripts/manage_user.py create ` writes metadata to `config/users.json` and prints policy/API key export commands.\n - UI helper: in Streamlit, check “Generate JWT token” to issue a token during user creation. Generation failures show inline errors and the user entry is not written.\n- API Keys:\n - `API_KEYS_JSON` JSON map: `{ \"\": \"\" }`\n- JWT:\n - Common: `JWT_ISSUER` (default: mcp-auth), `JWT_AUDIENCE` (default: mcp-agents)\n - HS256: `JWT_HS256_SECRET`\n - RS256/JWKS: `JWT_JWKS_URL` or `JWT_JWKS_FILE`, `JWT_JWKS_CACHE_SECONDS` (default: 300), `JWT_REQUIRE_KID` (default: false)\n - Validation toggles: `JWT_VALIDATE_ISSUER` (default: true), `JWT_VALIDATE_AUDIENCE` (default: true)\n - Helper: `python scripts/gen_jwt.py --secret --sub ` for quick dev tokens (see Quickstart example above).\n - Metadata persisted per user: `jwt_created_at`, `jwt_expires_at`, `jwt_ttl_seconds`. The Streamlit **Current users** grid surfaces status, timestamps, TTL seconds, and offers CSV export.\n- mTLS via proxy headers:\n - `MTLS_IDENTITY_HEADER` (default: x-ssl-client-s-dn)\n - `MTLS_VERIFY_HEADER` (default: x-ssl-client-verify)\n - `MTLS_SUBJECT_CN_PREFIX` (default: CN=)\n- Child token issuance:\n - `CHILD_TOKEN_ENABLED` (default: false)\n - `CHILD_TOKEN_TTL` (default: 90s)\n - `CHILD_TOKEN_POLICY_PREFIX` (default: mcp-agent-)\n- Rate limiting:\n - `RATE_LIMIT_ENABLED` (default: true)\n - `RATE_LIMIT_REQUESTS` (default: 60)\n - `RATE_LIMIT_WINDOW_SECONDS` (default: 60)\n- Server behavior:\n - `HOST`, `PORT`, `RELOAD`, `LOG_LEVEL` for `python main.py`\n - Logs directory: `LOG_DIR` (default: `./logs`)\n - `EXPOSE_REST_ROUTES` (default: true) — when false, disables REST feature routers (`/secrets`, `/transit`, `/db`, `/ssh`, `/whoami`) for MCP‑only deployments.\n - AWS KMS (optional):\n - `AWS_KMS_ENABLED` (default: false)\n - `AWS_REGION` (required when enabling KMS unless provided by IAM role/default profile)\n - `AWS_KMS_DEFAULT_KEY_ID` (optional convenience default for encrypt/data-key/sign requests)\n - `AWS_KMS_ENDPOINT` (optional; point to LocalStack or custom endpoint)\n - `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_SESSION_TOKEN` (optional; falls back to standard AWS credential resolution)\n- Observability:\n - Prometheus at `/metrics` (always enabled)\n - OpenTelemetry: `OTEL_EXPORTER_OTLP_ENDPOINT`, `OTEL_SERVICE_NAME` (optional)\n\nAuth Modes\n- API Key: send `X-API-Key: `. Map keys to agents via `API_KEYS_JSON`.\n- JWT: send `Authorization: Bearer ` with `sub` and optional `scopes`.\n- mTLS: terminate TLS at proxy and pass DN via `X-SSL-Client-S-DN`; CN is used as subject.\n\nAgent Path Namespace\n- Secrets live under `{KV_MOUNT}/data/{DEFAULT_PREFIX}/{subject}/...` (KV v2). The server enforces safe relative paths within the agent prefix.\n\nChild Token Issuance\n- If `CHILD_TOKEN_ENABLED=true`, a child token is minted per request with policy `{CHILD_TOKEN_POLICY_PREFIX}{subject}` and TTL `CHILD_TOKEN_TTL`.\n- Ensure the policy exists and the parent token can create child tokens.\n\nPolicy\n- Generate HCL for an agent:\n - `python scripts/gen_policy.py --agent alice --mount secret --prefix mcp > alice.hcl`\n - Suggested policy name: `mcp-agent-alice`\n- The policy grants CRUD/list on `data/{prefix}/{agent}/*`, list/read on `metadata/{prefix}/{agent}/*`, and versioned ops on delete/undelete/destroy.\n- Apply with the Vault CLI: `vault policy write mcp-agent-alice alice.hcl`\n\nEndpoints\n- KV v2\n - PUT `/secrets/{path}` — write (scope: write)\n - GET `/secrets/{path}` — read (scope: read) [query `version` optional]\n - DELETE `/secrets/{path}` — delete latest version (scope: delete)\n - GET `/secrets?prefix=...` — list keys (scope: list)\n - POST `/secrets/{path}:undelete` — body `{ \"versions\": [1,2] }` (scope: write)\n - POST `/secrets/{path}:destroy` — body `{ \"versions\": [1,2] }` (scope: write)\n- Transit\n - POST `/transit/encrypt` — `{ \"key\": \"k\", \"plaintext\": \"\" }` (scope: write)\n - POST `/transit/decrypt` — `{ \"key\": \"k\", \"ciphertext\": \"...\" }` (scope: read)\n - POST `/transit/sign` — `{ key, input, hash_algorithm?, signature_algorithm? }` (scope: write)\n - POST `/transit/verify` — `{ key, input, signature, hash_algorithm? }` (scope: read)\n - POST `/transit/rewrap` — `{ key, ciphertext }` (scope: write)\n - GET `/transit/random?bytes=32&format=base64|hex` (scope: read)\n- KMS endpoints are always exposed for development but return 503 unless `AWS_KMS_ENABLED=true`\n - POST `/kms/encrypt` — `{ plaintext: , key_id?, encryption_context?, grant_tokens? }` (scope: write)\n - POST `/kms/decrypt` — `{ ciphertext: , encryption_context?, grant_tokens? }` (scope: read)\n - POST `/kms/data-key` — `{ key_id?, key_spec? | number_of_bytes?, encryption_context?, grant_tokens? }` (scope: write)\n - POST `/kms/sign` — `{ key_id?, message? | message_digest?, signing_algorithm, message_type?, grant_tokens? }` (scope: write)\n - POST `/kms/verify` — `{ key_id?, signature: , message? | message_digest?, signing_algorithm, message_type?, grant_tokens? }` (scope: read)\n- Database\n - POST `/db/creds/{role}` — issue dynamic DB creds (scope: write)\n - POST `/db/renew` — `{ lease_id, increment? }` (scope: write)\n - POST `/db/revoke` — `{ lease_id }` (scope: write)\n- SSH\n - POST `/ssh/otp` — `{ role, ip, username, port? }` (scope: write)\n - POST `/ssh/sign` — `{ role, public_key, cert_type?, valid_principals?, ttl? }` (scope: write)\n- Health/Debug/Metrics\n- GET `/healthz`, `/livez`, `/readyz`, `/whoami`, `/echo-headers`, `/metrics`\n - `/readyz` returns a JSON body detailing Vault (`ok`/`detail`) and, when enabled, AWS KMS readiness. Expect HTTP 503 with explanatory messages when Vault credentials are missing or KMS is misconfigured.\n- MCP\n - Mounted at `/mcp` when `fastapi-mcp` is available\n\nAPI Docs\n- Swagger UI: `http://127.0.0.1:8089/docs`\n- ReDoc: `http://127.0.0.1:8089/redoc`\n- OpenAPI: `http://127.0.0.1:8089/openapi.json`\n\nMCP Usage\n- HTTP JSON-RPC: `POST /mcp/rpc` with JSON-RPC 2.0 messages; authenticate same as REST (API key / JWT / mTLS).\n- SSE channel: `GET /mcp/sse` provides periodic keepalives for server→client messaging (placeholder; extend as needed).\n- stdio: `SUBJECT=agentA python scripts/mcp_stdio.py` and write newline-delimited JSON-RPC messages to stdin.\n- Initialize result includes `protocolVersion: 2025-06-18`, basic capabilities, and lists tools/resources/prompts.\n - SSE events: server emits `tool.completed` events with `{type, tool, subject, ts}`; keepalives every 15s.\n\nMCP Inspector\n- An official, interactive UI for MCP servers (Swagger-like, but for MCP) that discovers tools/resources/prompts and lets you call them live.\n- Connect via HTTP:\n - RPC URL: `http://127.0.0.1:8089/mcp/rpc`\n - SSE URL (optional): `http://127.0.0.1:8089/mcp/sse`\n - Auth headers: add `X-API-Key: dev-api-key` (or `Authorization: Bearer `) in the Inspector’s connection settings.\n - If connecting from the hosted Inspector (HTTPS) to your local HTTP server, enable CORS:\n - `export CORS_ALLOW_ORIGINS=https://inspector.modelcontextprotocol.io`\n - Consider exposing your server via HTTPS (e.g., ngrok) to avoid mixed-content blocking.\n- Or connect via stdio:\n - Command: `SUBJECT=agent_api python scripts/mcp_stdio.py`\n - Inspector will spawn the process and speak JSON-RPC over stdio.\n- Once connected, Inspector should list the available tools: `kv.read`, `kv.write`, `kv.list`, `kv.delete`, `kv.undelete`, `kv.destroy`.\n- Current state: Resources/Prompts are empty; SSE sends keepalives only.\n\nTroubleshooting Inspector\n- `ModuleNotFoundError: vault_mcp` when running stdio: ensure you run from repo root, or use `SUBJECT=agent_api PYTHONPATH=$(pwd) python scripts/mcp_stdio.py`. The script now auto-adds repo root to `sys.path`.\n- CORS errors in the browser: set `CORS_ALLOW_ORIGINS=https://inspector.modelcontextprotocol.io` (comma separate multiple origins) and restart the server.\n- Mixed content blocked: use an HTTPS tunnel to your local server (e.g., `ngrok http 8089`) and switch Inspector URLs to `https`.\n\nPrometheus & OpenTelemetry\n- Prometheus endpoint: `GET /metrics` (text). Quick check: `curl -s http://127.0.0.1:8089/metrics | head`.\n- Metrics include `http_requests_total` and `http_request_duration_seconds` with labels `method`, `route`, `status`.\n- Additional telemetry: `http_requests_with_correlation_total` counts requests that include or receive a correlation ID. Every HTTP response returns `X-Correlation-Id`; if OTEL tracing is enabled, `X-Trace-Id` is also emitted.\n- OpenTelemetry tracing (optional): set `OTEL_EXPORTER_OTLP_ENDPOINT` (e.g., `http://localhost:4318/v1/traces`) and `OTEL_SERVICE_NAME` (default: `vault-mcp`).\n- Structured logs: JSON files under `./logs/` (`requests.log`, `responses.log`, `server.log`). Tail with `tail -f logs/requests.log`.\n\nLogging Details\n- Format: newline-delimited JSON. Core fields: `ts`, `lvl`, `msg`, `logger` plus context in `extra`.\n- Request logs (`vault_mcp.request`): include `request_id`, `client`, `method`, `path`, `status`, `duration_ms`.\n- Response/event logs (`vault_mcp.response`): per-endpoint keys, e.g.,\n - `kv_put|kv_get|kv_delete`: `subject`, `path`, `keys`, `version`, `request_id`\n - `kv_list`: `subject`, `prefix`, `count`, `request_id`\n - `transit_*`: `subject`, `key`, size/validity hints, `request_id`\n - `db_*` and `ssh_*`: high-level descriptors (e.g., `role`, `lease_id_suffix`, `ip`, `user`), never secret values\n- Request ID: responses include `X-Request-Id`; it is echoed in logs for correlation.\n- Example request log line:\n - `{ \"ts\": \"2024-01-01T10:00:00\", \"lvl\": \"info\", \"msg\": \"request\", \"logger\": \"vault_mcp.request\", \"request_id\": \"...\", \"client\": \"127.0.0.1\", \"method\": \"GET\", \"path\": \"/secrets\", \"status\": 200, \"duration_ms\": 12 }`\n\nExamples (curl)\n- Write then read a secret (API key `dev-key` for agent `agent_api`):\n - `curl -X PUT -H 'X-API-Key: dev-key' -H 'Content-Type: application/json' \\\n -d '{\"data\": {\"foo\":\"bar\"}}' http://127.0.0.1:8089/secrets/configs/demo`\n - `curl -H 'X-API-Key: dev-key' http://127.0.0.1:8089/secrets/configs/demo`\n- Random bytes from Transit (hex):\n - `curl -H 'X-API-Key: dev-key' 'http://127.0.0.1:8089/transit/random?bytes=16&format=hex'`\n- RS256/JWKS quick test:\n - See `local-vault/jwks/README.md` for generating keys, running JWKS, and testing.\n\nLocal Dev Helpers\n- Start server with sensible dev env: `bash scripts/run_dev.sh`\n- Enable all auth regardless of current env: `bash scripts/run_all_auth.sh`\n- Smoke test (server + local Vault): `bash scripts/smoke.sh`\n- Auth tests by agent:\n - API key (agent_api): `bash scripts/test_agent_api.sh`\n - JWT HS256 (agent_jwt): `bash scripts/test_agent_jwt.sh`\n - JWT RS256/JWKS (agent_jwt): `bash scripts/test_agent_jwt_rs256.sh`\n - mTLS headers (agent_mtls): `bash scripts/test_agent_mtls.sh`\n\nEnd-to-End and Example Agents\n- One-shot E2E (server + MCP HTTP + stdio + optional REST):\n - `LOG_LEVEL=DEBUG bash scripts/e2e_local.sh`\n- Example MCP agents (HTTP JSON-RPC):\n - API key: `bash scripts/run_example_agent.sh`\n - JWT: `bash scripts/run_example_agent.sh --jwt 'YOUR_JWT'`\n - mTLS headers: `bash scripts/run_example_agent.sh --mtls`\n - No‑LLM direct client (no model provider): `bash scripts/run_example_agent.sh --no-llm`\n\nExamples\n- LangChain agent that wraps these endpoints as tools:\n - See `examples/langchain_agent/README.md` and `examples/langchain_agent/agent.py`\n\nTesting\n- Run tests: `pytest`\n- Pytest overview:\n - `tests/test_health.py`: Verifies basic liveness endpoints — `GET /healthz` and `GET /livez` return `ok: true`.\n - `tests/test_auth_and_kv.py`: Exercises API‑key auth and KV v2 CRUD.\n - Uses a mocked hvac KV client to avoid real Vault.\n - Flow: `PUT /secrets/configs/demo` writes data, `GET` reads it back, `DELETE` removes it, subsequent `GET` returns 404.\n - Also checks `GET /whoami` returns the expected subject for `X-API-Key`.\n - `tests/test_transit_random.py`: Tests Transit random byte generation endpoint with deterministic mock.\n - Monkeypatches `client_for_principal` to return a stub where `generate_random_bytes` is predictable.\n - Validates both `format=hex` and default `base64` responses for `GET /transit/random`.\n - `tests/test_health_ready.py`: Covers `/readyz` for authenticated, unauthenticated, Vault error, and generic error cases.\n - `tests/test_kv_extras.py`: Covers `GET /secrets?prefix=...` list and version ops (`:undelete`, `:destroy`).\n - `tests/test_transit_endpoints.py`: Covers `/transit/encrypt|decrypt|sign|verify|rewrap` with a transit stub.\n - `tests/test_db_and_ssh_routes.py`: Covers `/db/creds|renew|revoke` and `/ssh/otp|sign` with stubs.\n - `tests/test_auth_modes.py`: HS256 JWT `/whoami` (valid and bad aud), mTLS header success/fail.\n - `tests/test_auth_jwt_rs256_local.py`: Local RS256: generates RSA + JWKS and validates `/whoami` via monkeypatched JWKS.\n - `tests/test_rate_limit_and_metrics.py`: Verifies `/metrics` and rate limiting on `/transit/random` (429 on third call).\n - `tests/test_security_path_and_scopes.py`: Path sanitization and 403 when scopes are insufficient.\n - `tests/test_app_exception_handlers.py`: Maps Vault `Forbidden` -> 403 and `VaultError` -> 502 JSON responses.\n - (If you add MCP client tests) exercise `POST /mcp/rpc` for `initialize`, `tools/list`, and `tools/call` with a JWT or API key.\n\nRun subsets\n- Keyword filter: `pytest -k transit`\n- Coverage detail: `pytest -q --cov=vault_mcp --cov-report=term-missing`\n\nSecurity Notes\n- Use TLS end-to-end; for mTLS, terminate at a trusted proxy and pass identity headers.\n- Avoid logging secret values; the app uses structured logging with response metadata only.\n- Prefer JWT or mTLS in production; reserve API keys for development.\n- Enable Vault audit devices and keep token TTLs minimal.\n\nTroubleshooting\n- Import errors (e.g., fastapi not found): ensure you use the same Python interpreter that installed deps.\n - `python -m uvicorn main:app --reload`\n- Uvicorn targets: use `:` — e.g., `main:app`.\n- Change port/host: `python -m uvicorn main:app --reload --port 8090 --host 0.0.0.0`\n- Increase logs: add `--log-level debug --access-log`\n","English","tag","en-US",{"_41":42,"_13":43,"_50":32,"_51":32,"_16":52,"_53":54,"_33":34,"_66":67,"_74":-5,"_75":76,"_215":216,"_221":-5,"_61":202,"_222":218,"_64":223,"_224":225},"addedAt","2025-09-01T01:00:44.775148Z",[44,45,46,47,48,49],"category:agent-orchestration","category:security-and-iam","category:shell-access","hosting:remote-capable","language:python","license_grade:f","descriptionMarkdown","descriptionPlainText",10995,"integrations",[55],{"_56":57,"_31":63,"_64":65},"brand",{"_58":59,"_33":60,"_61":62},"logoSvgPath","M0 0l11.955 24L24 0zm13.366 4.827h1.393v1.38h-1.393zm-2.77 5.569H9.22V8.993h1.389zm0-2.087H9.22V6.906h1.389zm0-2.086H9.22V4.819h1.389zm2.087 6.263h-1.377V11.08h1.388zm0-2.09h-1.377V8.993h1.388zm0-2.087h-1.377V6.906h1.388zm0-2.086h-1.377V4.819h1.388zm.683.683h1.393v1.389h-1.393zm0 3.475V8.993h1.389v1.388Z","Vault","slug","vault","Provides secure secrets management through HashiCorp Vault, enabling agent-scoped secret storage, retrieval, and management with KV v2 operations, optional Transit encryption/decryption, and per-agent namespacing with authentication via API keys, JWT, or mTLS","uid","uknlgmm3t1","namespace",{"_68":69,"_61":73},"owner",{"_70":71},"githubAccount",{"_72":73},"login","geopolitis","redditPostExternalId","repository",{"_77":78,"_187":188,"_191":192,"_210":-5,"_211":212,"_213":-5,"_214":-5},"argumentsJsonSchema",{"_79":80,"_89":90,"_96":186},"oneOf",[81,85],{"_82":83},"required",[84],"VAULT_TOKEN",{"_82":86},[87,88],"VAULT_ROLE_ID","VAULT_SECRET_ID","properties",{"_91":92,"_98":99,"_102":103,"_106":107,"_110":111,"_114":115,"_117":118,"_84":121,"_123":124,"_126":127,"_87":129,"_131":132,"_135":136,"_139":140,"_88":142,"_144":145,"_148":149,"_151":152,"_154":155,"_158":159,"_161":162,"_164":165,"_168":169,"_171":172,"_175":176,"_179":180,"_183":184},"HOST",{"_93":94,"_31":95,"_96":97},"default","127.0.0.1","Host to bind the server to","type","string","PORT",{"_93":100,"_31":101,"_96":97},"8000","Port to bind the server to","RELOAD",{"_93":104,"_31":105,"_96":97},"false","Enable auto-reload for development","KV_MOUNT",{"_93":108,"_31":109,"_96":97},"secret","KV mount point in Vault","LOG_LEVEL",{"_93":112,"_31":113,"_96":97},"info","Log level for the server","JWT_ISSUER",{"_31":116,"_96":97},"JWT issuer claim","VAULT_ADDR",{"_93":119,"_31":120,"_96":97},"http://localhost:8200","Vault server address",{"_31":122,"_96":97},"Vault authentication token","JWT_AUDIENCE",{"_31":125,"_96":97},"JWT audience claim","API_KEYS_JSON",{"_31":128,"_96":97},"JSON map of API keys to agent IDs: { \"\": \"\" }",{"_31":130,"_96":97},"Vault AppRole role ID for authentication","DEFAULT_PREFIX",{"_93":133,"_31":134,"_96":97},"mcp","Default prefix for agent namespacing","CHILD_TOKEN_TTL",{"_93":137,"_31":138,"_96":97},"90s","TTL for child tokens","VAULT_NAMESPACE",{"_31":141,"_96":97},"Vault namespace (Enterprise only)",{"_31":143,"_96":97},"Vault AppRole secret ID for authentication","AUTH_JWT_ENABLED",{"_93":146,"_31":147,"_96":97},"true","Enable JWT authentication","JWT_HS256_SECRET",{"_31":150,"_96":97},"Secret for HS256 JWT signing","AUTH_MTLS_ENABLED",{"_93":104,"_31":153,"_96":97},"Enable mTLS authentication via proxy headers","MTLS_VERIFY_HEADER",{"_93":156,"_31":157,"_96":97},"x-ssl-client-verify","Header name for mTLS verification status","RATE_LIMIT_ENABLED",{"_93":146,"_31":160,"_96":97},"Enable rate limiting","CHILD_TOKEN_ENABLED",{"_93":104,"_31":163,"_96":97},"Enable per-request child token issuance","RATE_LIMIT_REQUESTS",{"_93":166,"_31":167,"_96":97},"60","Number of requests allowed per window","AUTH_API_KEY_ENABLED",{"_93":146,"_31":170,"_96":97},"Enable API key authentication","MTLS_IDENTITY_HEADER",{"_93":173,"_31":174,"_96":97},"x-ssl-client-s-dn","Header name for mTLS client identity","MTLS_SUBJECT_CN_PREFIX",{"_93":177,"_31":178,"_96":97},"CN=","Prefix for extracting CN from mTLS subject","CHILD_TOKEN_POLICY_PREFIX",{"_93":181,"_31":182,"_96":97},"mcp-agent-","Prefix for child token policy names","RATE_LIMIT_WINDOW_SECONDS",{"_93":166,"_31":185,"_96":97},"Rate limiting window in seconds","object","githubProject",{"_35":36,"_189":190},"url","https://github.com/geopolitis/MCP-f-Secrets","githubRepository",{"_193":194,"_195":196,"_197":198,"_16":199,"_200":201,"_33":202,"_68":203,"_205":206,"_207":-5,"_208":209},"defaultBranch","main","fullName","geopolitis/MCP-f-Secrets","githubTreeId",243043,25065,"language","Python","MCP-f-Secrets",{"_72":73,"_64":204},"B57b1ptjlP","recentStargazers",1,"spdxLicense","stargazers",2,"glamaJson","inspectable",false,"npmPackage","supportedPlatforms","scores",{"_217":218,"_219":-5,"_220":-5},"license",0,"quality","security","simpleIcon","toolCount","8b198rvz14","updatedAt","2025-09-22T22:17:17.276706Z","meta",[228,231,233,240,243,245,248,251,254,257,260,262,265,268,270,272,274,276,278],{"_229":230},"title","Vault MCP Bridge | Glama",{"_232":32,"_33":31},"content",{"_234":235,"_236":237,"_238":239},"href","https://glama.ai/mcp/servers/@geopolitis/MCP-f-Secrets","rel","canonical","tagName","link",{"_232":34,"_241":242},"property","og:title",{"_232":32,"_241":244},"og:description",{"_232":246,"_241":247},"https://glama.ai/logo.png","og:logo",{"_232":249,"_241":250},"https://glama.ai/mcp/servers/@geopolitis/MCP-f-Secrets/og-image","og:image",{"_232":252,"_241":253},"630","og:image:height",{"_232":255,"_241":256},"1200","og:image:width",{"_232":258,"_241":259},"website","og:type",{"_232":235,"_241":261},"og:url",{"_232":263,"_241":264},"Glama – MCP Hosting Platform","og:site_name",{"_232":266,"_33":267},"summary_large_image","twitter:card",{"_232":263,"_33":269},"twitter:title",{"_232":32,"_33":271},"twitter:description",{"_232":249,"_33":273},"twitter:image",{"_232":252,"_33":275},"twitter:image:height",{"_232":255,"_33":277},"twitter:image:width",{"_279":280},"script:ld+json",{"_281":282,"_283":284},"@context","http://schema.org","@graph",[285],{"_281":286,"_287":288,"_289":290},"https://schema.org","@type","BreadcrumbList","itemListElement",[291,297,300,304],{"_287":292,"_293":294,"_33":295,"_296":206},"ListItem","item","/","Glama","position",{"_287":292,"_293":298,"_33":299,"_296":209},"/mcp","MCP",{"_287":292,"_293":301,"_33":302,"_296":303},"/mcp/servers","Servers",3,{"_287":292,"_293":305,"_33":34,"_296":306},"/mcp/servers/@geopolitis/MCP-f-Secrets",4,"visitorIsMaintainer","routes/_public/mcp/servers/~namespace/~slug/_pages/_explorer/tree/~commit/~/_route",{"_310":194,"_29":311,"_358":359,"_226":370,"_368":367,"_394":395},"branch",{"_41":42,"_13":312,"_50":32,"_51":32,"_16":52,"_53":313,"_33":34,"_66":316,"_74":-5,"_75":319,"_215":357,"_221":-5,"_61":202,"_222":218,"_64":223,"_224":225},[44,45,46,47,48,49],[314],{"_56":315,"_31":63,"_64":65},{"_58":59,"_33":60,"_61":62},{"_68":317,"_61":73},{"_70":318},{"_72":73},{"_77":320,"_187":354,"_191":355,"_210":-5,"_211":212,"_213":-5,"_214":-5},{"_79":321,"_89":326,"_96":186},[322,324],{"_82":323},[84],{"_82":325},[87,88],{"_91":327,"_98":328,"_102":329,"_106":330,"_110":331,"_114":332,"_117":333,"_84":334,"_123":335,"_126":336,"_87":337,"_131":338,"_135":339,"_139":340,"_88":341,"_144":342,"_148":343,"_151":344,"_154":345,"_158":346,"_161":347,"_164":348,"_168":349,"_171":350,"_175":351,"_179":352,"_183":353},{"_93":94,"_31":95,"_96":97},{"_93":100,"_31":101,"_96":97},{"_93":104,"_31":105,"_96":97},{"_93":108,"_31":109,"_96":97},{"_93":112,"_31":113,"_96":97},{"_31":116,"_96":97},{"_93":119,"_31":120,"_96":97},{"_31":122,"_96":97},{"_31":125,"_96":97},{"_31":128,"_96":97},{"_31":130,"_96":97},{"_93":133,"_31":134,"_96":97},{"_93":137,"_31":138,"_96":97},{"_31":141,"_96":97},{"_31":143,"_96":97},{"_93":146,"_31":147,"_96":97},{"_31":150,"_96":97},{"_93":104,"_31":153,"_96":97},{"_93":156,"_31":157,"_96":97},{"_93":146,"_31":160,"_96":97},{"_93":104,"_31":163,"_96":97},{"_93":166,"_31":167,"_96":97},{"_93":146,"_31":170,"_96":97},{"_93":173,"_31":174,"_96":97},{"_93":177,"_31":178,"_96":97},{"_93":181,"_31":182,"_96":97},{"_93":166,"_31":185,"_96":97},{"_35":36,"_189":190},{"_193":194,"_195":196,"_197":198,"_16":199,"_200":201,"_33":202,"_68":356,"_205":206,"_207":-5,"_208":209},{"_72":73,"_64":204},{"_217":218,"_219":-5,"_220":-5},"member",{"_360":361,"_362":363,"_366":367,"_368":367,"_96":369},"childGitHubTreeId",243029,"commit",{"_364":365},"sha","b3a1ffb072f84b84ecd7a46fefbfa6ae84616944","fullPath","examples","path","tree",[371,373,375,377,379,380,381,383,384,385,386,387,388,389,390,391,392,393],{"_229":372},"examples | Vault MCP Bridge | Glama",{"_232":374,"_33":31},"Enterprise-grade security, privacy, and features like agents, MCP, prompt templates, and more.",{"_234":376,"_236":237,"_238":239},"https://glama.ai/mcp/servers/@geopolitis/MCP-f-Secrets/tree/b3a1ffb072f84b84ecd7a46fefbfa6ae84616944/examples",{"_232":378,"_241":242},"examples | Vault MCP Bridge",{"_232":374,"_241":244},{"_232":246,"_241":247},{"_232":382,"_241":250},"https://glama.ai/generated-images/og?title=examples+%7C+Vault+MCP+Bridge",{"_232":252,"_241":253},{"_232":255,"_241":256},{"_232":258,"_241":259},{"_232":376,"_241":261},{"_232":263,"_241":264},{"_232":266,"_33":267},{"_232":263,"_33":269},{"_232":374,"_33":271},{"_232":382,"_33":273},{"_232":252,"_33":275},{"_232":255,"_33":277},"treeMembers",[396],{"_362":397,"_366":398,"_368":399,"_96":369},{"_364":365},"examples/langchain_agent","langchain_agent","actionData","errors"]

MCP directory API