Skip to main content
Glama
AIWerk

@aiwerk/mcp-server-vault

by AIWerk

save_generated_secret

Save an agent-generated secret into a Vaultwarden/Bitwarden vault collection with end-to-end encryption, rejecting name collisions and setting expiry automatically.

Instructions

Save an agent-generated secret into the mcp-agent-created collection. CREATE-only — cannot overwrite an existing item (name collision returns an error). The secret is E2E-encrypted with the vault org key before transmission. Sets mcp-created-by, mcp-created-at, mcp-expires-at, and mcp-used-in custom fields automatically. Blocked when READ_ONLY=1. Logs to DRY_RUN without creating a real cipher when DRY_RUN=1.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
nameYesUnique name for this secret within the mcp-agent-created collection. Case-sensitive. Name collision returns an error — pick a distinct name.
typeYesLogical type of this secret. "password" for user passwords, "api-key" for API tokens and keys.
notesNoOptional non-sensitive annotation (e.g. where this key is used). Not the secret itself.
valueYesThe secret value to store (max 4096 chars). Assumed already generated by the agent.
used_inNoFree-form context string, e.g. "publish_protected_html @ aiwerk.ch/press/2026-05". Stored as mcp-used-in custom field.
expires_in_daysNoDays until the secret expires (sets mcp-expires-at). Default 30, max 365.
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description goes well beyond annotations by disclosing E2E encryption, automatic custom field setting, collision errors, READ_ONLY blocking, and DRY_RUN logging. This gives rich behavioral context that annotations alone do not provide. No contradiction with annotations (readOnlyHint=false matches write operation).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a well-structured paragraph that front-loads the primary purpose, then efficiently adds constraints and side effects. Every sentence adds value, with no filler or redundancy. It is concise yet comprehensive.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers most important aspects: purpose, constraints, side effects, and error behavior. It lacks explicit mention of return value or success response, which is notable since no output schema exists. However, for a save tool, the return value may be implicitly understood, so this is a minor gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so per rubric baseline is 3. The description adds some context about automatic custom fields (mcp-expires-at, mcp-used-in) but does not significantly enhance parameter understanding beyond the schema. It repeats some schema info but does not compensate for any missing details.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool saves an agent-generated secret into the mcp-agent-created collection, with specific resource scope. However, it does not explicitly distinguish itself from the sibling tool 'save_login_item', so it lacks explicit sibling differentiation. The verb 'Save' and resource are specific.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context: it is CREATE-only and cannot overwrite, and it mentions conditions like READ_ONLY=1 and DRY_RUN=1. It does not explicitly name alternatives but implies usage for new secrets only, which is clear enough for an agent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/AIWerk/mcp-server-vault'

If you have feedback or need assistance with the MCP directory API, please join our Discord server