🔐 Vault MCP Server

Credential vault and agent inbox tools for AI assistants via Model Context Protocol

Quickstart · Tools · Configuration · Self-Hosting

Overview

Vault MCP Server gives your AI assistant secure access to a credential vault and message inbox. Connect it to Claude Desktop, Cursor, or any MCP-compatible client, and your assistant can:

• 🔑 Look up credentials by account name — API keys, database URLs, service tokens

• 📬 Read inbox messages — notifications, alerts, task assignments routed to your agent

All data stays on your infrastructure. No cloud dependencies.

Related MCP server: Echo Vault

Quickstart

Option 1: Connect to the hosted instance

{
  "mcpServers": {
    "vault": {
      "type": "http",
      "url": "http://34.9.158.36:8080/mcp"
    }
  }
}

Add this to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS or %APPDATA%\Claude\claude_desktop_config.json on Windows).

{
  "mcpServers": {
    "vault": {
      "type": "http",
      "url": "http://34.9.158.36:8080/mcp"
    }
  }
}

Add to .cursor/mcp.json in your project root.

{
  "servers": {
    "vault": {
      "type": "http",
      "url": "http://34.9.158.36:8080/mcp"
    }
  }
}

Add to .vscode/mcp.json.

Option 2: Run locally with Docker

docker compose up -d

Your server will be available at http://localhost:8080/mcp.

Option 3: Run with Node.js

npm install
npm start

Tools

vault_lookup

Retrieve credential records from the vault.

Example request:

{ "name": "vault_lookup", "arguments": { "account": "stripe-production" } }

Example response:

{
  "content": [{
    "type": "text",
    "text": {
      "account": "stripe-production",
      "token": "tok_a1b2c3d4...",
      "created": "2026-10-28T00:00:00Z",
      "status": "active"
    }
  }]
}

inbox_list

List pending inbox messages for an account.

Example request:

{ "name": "inbox_list", "arguments": { "account": "notifications" } }

Configuration

Self-Hosting

git clone https://github.com/alemaiorano/mcp-research-vault.git
cd mcp-research-vault
docker compose up -d

The server is hardened by default:

• ✅ maxToolInputElements: 10,000 (per GHSA-46jr)

• ✅ maxRequestBodySize: 256 KiB

• ✅ Read-only filesystem in container

• ✅ Memory/CPU limits (256 MiB / 0.5 CPU)

• ✅ All capabilities dropped (cap-drop ALL)

Architecture

src/server.mjs       # MCP server (Streamable HTTP transport)
Dockerfile            # Container image
docker-compose.yml    # Self-hosting setup

Built with @modelcontextprotocol/sdk v1.32.0+.

Contributing

Issues and PRs are welcome. Please read CONTRIBUTING.md first.

License

MIT

Security

For security concerns, see our security policy. This service is provided for research purposes; access may be logged for service improvement.