Skip to main content
Glama
KhushalB25

encrypted-vault-mcp

by KhushalB25

encrypted-vault-mcp

MCP server providing a local-first encrypted key-value vault. Store API keys, secrets, notes, or any string data under a PIN. AES-GCM 256-bit cipher, PBKDF2 (600k iterations, SHA-256) derived key. Zero cloud. Zero telemetry. Zero network.

MIT License Node ≥ 18 MCP AES-GCM

Why

Storing secrets in plain text in chat history is bad. Pasting API keys into prompts is worse. This MCP gives the agent a vault: it can store a value once under a name, then later fetch it by name without you re-typing the secret.

  • AI agent can hold long-lived secrets safely between chats

  • You unlock once per session with a PIN

  • All data stays on the machine as encrypted bytes

  • Wrong PIN = wrong key = nothing decrypts (AES-GCM auth tag fails)

Related MCP server: enigmagent-mcp

Install

npm install -g encrypted-vault-mcp

Or npx:

npx encrypted-vault-mcp

Use with Claude Desktop

Add to claude_desktop_config.json (Windows: %APPDATA%\Claude\claude_desktop_config.json):

{
  "mcpServers": {
    "vault": {
      "command": "npx",
      "args": ["-y", "encrypted-vault-mcp"]
    }
  }
}

Restart Claude Desktop. First time:

"Use vault to init with pin 1234"

Then any time:

"Unlock vault with pin 1234, then store my-openai-key as sk-..."

"Fetch my-openai-key"

"List vault keys"

Tools

Tool

Args

Description

init

pin

Create a new vault file with this PIN. Fails if one already exists.

unlock

pin

Derive key from PIN. Required before store/fetch/list/remove.

lock

Clear key from memory.

store

key, value

Encrypt + save under name.

fetch

key

Decrypt + return value.

list

List all key names. Values stay encrypted on disk.

remove

key

Delete an item.

change_pin

old_pin, new_pin

Rotate PIN. Re-encrypts everything with new key.

status

Show whether vault exists / is unlocked / path / item count.

Crypto

  • Cipher: AES-256-GCM (authenticated encryption — wrong PIN = decryption fails cleanly)

  • Key derivation: PBKDF2-HMAC-SHA256, 600,000 iterations (OWASP 2023), 16-byte salt

  • IV: 96-bit random per encryption (NIST SP 800-38D)

  • PIN verification: separate PBKDF2 hash with its own salt; the PIN itself is never persisted

  • File permissions: vault file is written with mode 0o600 (owner read/write only)

Storage location

Default: ~/.encrypted-vault-mcp/vault.json

Override:

{
  "mcpServers": {
    "vault": {
      "command": "npx",
      "args": ["-y", "encrypted-vault-mcp"],
      "env": { "VAULT_PATH": "/secure/drive/my-vault.json" }
    }
  }
}

Threat model

Threat

Protected?

Disk read by attacker without PIN

✅ items unrecoverable without PIN

Wrong PIN

✅ AES-GCM auth fails, no data leaked

PIN brute-force

⚠️ 600k PBKDF2 iterations slow it; use a real password for high-value secrets

Process memory dump while unlocked

❌ key sits in memory between unlock and lock — lock when done

Malicious MCP client

❌ if the agent itself is hostile, it can call fetch on whatever it wants — only run trusted agents

Local development

git clone https://github.com/KhushalB25/encrypted-vault-mcp.git
cd encrypted-vault-mcp
npm install
npm run build
npm start

Inspect:

npx @modelcontextprotocol/inspector node dist/index.js

Author

Khushal Bhandari · GitHub

License

MIT

Available Tools

9 tools
change_pinA

Rotate the PIN. Requires the current PIN. Re-encrypts every item with a fresh derived key and new salt.

ParametersJSON Schema
NameRequiredDescriptionDefault
new_pinYes
old_pinYes

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without annotations, the description discloses a key behavioral trait: 'Re-encrypts every item with a fresh derived key and new salt', indicating a heavy mutation operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, no filler, front-loaded with the core action. Every word adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no annotations and no output schema, the description covers purpose, prerequisite, and side effect reasonably well, though missing error handling details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, and while the description maps old_pin to 'current PIN' and new_pin to 'new PIN', it adds no further semantic details like format or constraints.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a clear verb-resource phrase 'Rotate the PIN' and adds context about re-encrypting items, making it distinct from siblings like lock or unlock.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

States 'Requires the current PIN', which is a prerequisite, but does not provide explicit when-to-use or when-not-to-use guidance relative to sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

fetchA

Decrypt and return the value for a given key. Errors if the key does not exist.

ParametersJSON Schema
NameRequiredDescriptionDefault
keyYes

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description discloses that the tool decrypts and returns a value and errors on missing keys. However, it does not address other behavioral aspects like idempotency, side effects, or rate limits. The transparency is adequate but not thorough.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no filler, directly stating the core function and error behavior. It is well-structured and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the basic operation and error case, but omits the return value type (e.g., string, number). Given no output schema, this leaves ambiguity. For a simple tool, it is mostly complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description says 'for a given key', matching the schema, but adds minimal meaning. It mentions the error condition for missing keys but does not explain key format or constraints. With 0% schema description coverage, the description provides only marginal additional context.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool decrypts and returns the value for a given key, and errors if the key does not exist. This distinctively separates it from siblings like store (create/update) and list (enumerate).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus its siblings. The description does not mention alternatives or prerequisites, leaving the agent to infer usage from the name alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

initA

Initialise a new vault file with a PIN. Fails if a vault already exists at the configured path. The PIN is never stored — only a separate PBKDF2 hash for verification. Default path: ~/.encrypted-vault-mcp/vault.json (override with VAULT_PATH env).

ParametersJSON Schema
NameRequiredDescriptionDefault
pinYesPIN at least 4 characters.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses that the PIN is never stored, only a PBKDF2 hash for verification. Mentions default path and env variable. With no annotations, this description does a good job at behavioral transparency, though it could note whether it creates directories.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each adding essential information: action/failure condition, security detail, path configuration. No filler words, front-loaded with the core purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple initialization tool with no output schema and one parameter, the description covers the purpose, failure condition, security aspect, and configuration. It could mention what happens if the missing directory must be created, but overall it's sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with the pin parameter described as 'PIN at least 4 characters.' Description echoes that requirement ('PIN at least 4 characters') but does not add additional semantics beyond the schema. Baseline score applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the action (initialize), the object (vault file), and the means (with a PIN). Distinguishes from siblings like fetch, list, etc., by focusing on first-time setup. Explicitly mentions failure condition if vault exists.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Implicitly tells when to use: when no vault exists. Explicitly says 'Fails if a vault already exists,' which is a clear exclusion condition. Also provides default path and env override. Lacks explicit sibling comparison but context makes it clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

listA

List all keys in the vault. Values stay encrypted on disk.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden. It discloses that values stay encrypted on disk, reassuring the tool is non-mutating and safe. However, it does not elaborate on other behavioral aspects like idempotency or latency, which are minor for a list operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences, each adding distinct value: listing keys and encryption behavior. No wasted words, front-loaded with the core action. Exemplary conciseness for a simple tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given zero parameters and no output schema, the description covers the tool's essential function. It could be improved by specifying the output format (e.g., returns a list of key names), but for a simple list operation the current description is nearly complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has no parameters and schema description coverage is 100%, so the description adds no parameter details, which is appropriate. The lack of parameters is inherent and does not require further explanation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists all keys in the vault, specifying the exact resource (keys) and scope (all). It distinguishes from sibling tools like 'fetch' (retrieve a value) and 'store' (add a key), making purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for listing keys but provides no explicit guidance on when to use this tool vs. alternatives like 'fetch' or 'store'. No conditions or exclusions are mentioned, leaving the agent to infer from context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

lockA

Clear the derived key from memory. After this, store/fetch/list/remove require unlock again. Recommended at the end of a session.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses that the derived key is cleared and that subsequent operations need unlock. No annotations provided, so description carries full burden; it adequately covers the behavioral impact.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no wasted words. First sentence front-loads the primary action; second adds important context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Fully sufficient for a parameterless tool with no output schema. Covers action, consequence, and recommended usage pattern.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

No parameters, so baseline score of 4 applies. Description does not mention parameters (none exist), so no deduction.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states 'Clear the derived key from memory' with a specific verb and resource. Distinguishes from siblings by explaining that after this, store/fetch/list/remove require unlock again.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit guidance: 'Recommended at the end of a session.' Implies context but no explicit exclusions or alternatives; siblings exist but not directly compared.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

removeB

Permanently delete an item from the vault.

ParametersJSON Schema
NameRequiredDescriptionDefault
keyYes

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without annotations, the description must convey critical behavioral traits. It explicitly states 'permanently delete,' indicating irreversibility. However, it does not describe any side effects, required permissions, or what happens to related data, leaving gaps for a destructive operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no wasted words. However, it is so brief that it sacrifices completeness; a slightly longer description front-loading essential details would be more effective without sacrificing conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple tool with one parameter and no output schema, the description is complete in terms of purpose, but for a destructive operation without annotations, more behavioral context is expected. The description lacks details on what the deletion entails, making it incomplete for safe use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description mentions 'item' as the target, weakly linking to the 'key' parameter. With 0% schema description coverage, the description should explain the meaning of 'key' (e.g., what format, where to obtain it), but it adds only minimal context. The agent cannot determine how to specify the item beyond guessing it's a string identifier.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'permanently delete an item from the vault,' which is a clear verb+resource combination. It distinguishes from siblings like fetch (retrieval) and store (insertion), leaving no ambiguity about its purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives. The description does not mention prerequisites, contexts where deletion is appropriate, or cases where it should be avoided. The agent is left to infer usage from the tool's name and siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

statusA

Report whether the vault file exists, whether it is currently unlocked, the on-disk path, and how many items it contains.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. It explicitly lists all reported properties: existence, unlock status, path, item count. No behavioral surprises.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Single sentence that is front-loaded with the verb and immediately lists outputs. Every word adds value; no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given zero parameters, no output schema, and a straightforward status tool, the description is fully adequate. An agent can correctly select and understand the tool's output.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

No parameters exist. With zero parameters, the baseline is 4. The description adds value by explaining what the tool returns, compensating for lack of output schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool reports on vault file existence, unlock status, path, and item count. It uses a specific verb 'report' and resource 'vault file'. It distinguishes from siblings like lock/unlock which are action-oriented.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool (to check vault status) but does not explicitly contrast with alternatives. However, the context of sibling tools (action verbs) makes the usage clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

storeA

Encrypt a value with AES-256-GCM and save under the given key. A random 96-bit IV is generated per encryption. Overwrites any existing value for the same key.

ParametersJSON Schema
NameRequiredDescriptionDefault
keyYesItem name.
valueYesPlaintext value to encrypt.

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description discloses key behaviors: encryption algorithm (AES-256-GCM), random IV generation per encryption, and overwriting existing values. This provides good transparency, though it could mention side effects like potential performance impact.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, tightly worded sentence that efficiently conveys the core action, encryption details, and overwrite behavior with no superfluous words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

While the description covers encryption and overwriting, it lacks information about the return value (e.g., success indicator or ciphertext), potential error conditions, or prerequisites like initialization. For a tool with no output schema, this is a notable gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions 'Item name.' and 'Plaintext value to encrypt.' The tool description adds encryption context (AES-256-GCM) but does not elaborate further on parameter formats or constraints beyond the schema. Baseline of 3 is appropriate given high schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states it encrypts a value with AES-256-GCM and saves it under a given key, clearly indicating a write operation. This distinguishes it from siblings like fetch (read) and remove (delete).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for storing encrypted values and mentions overwrite behavior, but lacks explicit guidance on when to use vs. alternatives like lock or init. No exclusions or prerequisites are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

unlockA

Unlock the vault for this server session. Derives the AES-256-GCM key from PIN + salt using PBKDF2 (600,000 iterations, SHA-256). On wrong PIN, returns an error. After unlock, store/fetch/list/remove are available until lock is called or the server process exits.

ParametersJSON Schema
NameRequiredDescriptionDefault
pinYes

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses key derivation details (PBKDF2, iterations, cipher) and error behavior on wrong PIN. No annotations exist, so description carries full burden. Could mention if multiple unlock calls are allowed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three efficient sentences, front-loaded with purpose, then algorithm and consequences. No extraneous information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Missing prerequisite information (e.g., whether 'init' must be called first). With siblings like init, this is a notable gap. Otherwise covers effect and lifecycle well.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema has 0% description coverage, but description explains that pin is used with salt to derive the key and that wrong pin returns an error. Adds significant meaning beyond the raw schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the tool unlocks the vault for a session, distinguishes from siblings like lock and init. Specifies the algorithm used and the effect on other tool availability.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides context on when to use (before other operations) and lifecycle (until lock or process exit). However, does not explicitly state when not to use or mention alternatives like init.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

TDQS

A4.1/5.0
Disambiguation5/5

Each tool addresses a unique action: init, unlock/lock for session management, store/fetch/remove for CRUD, list for key enumeration, status for vault info, and change_pin for rotation. No two tools overlap in purpose.

Naming Consistency5/5

All tool names use consistent lowercase snake_case with a verb_noun pattern (e.g., change_pin, list, store). No mixing of conventions or vague verbs like 'process' or 'do'.

Tool Count5/5

9 tools is ideal for an encrypted vault: covering initialization, authentication, CRUD, listing, status, and PIN rotation. No unnecessary tools and no critical gaps.

Completeness5/5

The tool surface covers the complete vault lifecycle: init (create), unlock/lock (session), store/fetch/remove (data management), list (inventory), status (health), and change_pin (maintenance). Missing a 'delete vault' tool but that's a rare operation.

Maintenance

ActivitySlowing
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    D
    maintenance
    Local AES-256-GCM encrypted vault for AI agents. Resolve {{PLACEHOLDER}} secrets in prompts at runtime — LLMs never see real API keys. Argon2id key derivation, zero cloud.
    2
    84
    2
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Local, encrypted credential vault for AI agents that enables secure multi-account management across services like Supabase, GitHub, Vercel, and Stripe, allowing seamless account switching without restarting the chat client.
    12
    2
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Encrypted secrets vault that blinds AI agents to API keys. Stores secrets in AES-256-GCM encrypted SQLite vault, resolves them at runtime via MCP values never appear in LLM conversation transcripts. Sandbox .env files with deterministic fakes.
    7
    73
    3
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/KhushalB25/encrypted-vault-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server