Best Vault MCP Servers
Vault is a product by HashiCorp that provides secure access to secrets and sensitive data using collaborative governance and encryption.
Why this server?
Provides a team vault for storing and rotating secrets, which can be referenced in deployments using vault:// references.
AlicenseAqualityCmaintenanceEnables AI coding agents to instantly provision ephemeral developer infrastructure like Postgres, Redis, MongoDB, and container deployments over HTTPS, with no Docker or signup required for the free anonymous tier.31MITWhy this server?
Detects and redacts HashiCorp Vault tokens in text.

classifinder-mcpofficial
AlicenseAqualityBmaintenanceEnables AI agents to scan text for leaked secrets and prompt injection markers, and redact them before reaching an LLM.21MITWhy this server?
Supports HashiCorp Vault as a configured destination for storing and resolving secrets.
AlicenseAqualityBmaintenanceEnables AI agents to ask users for credentials, secrets, and sensitive data through local browser forms that the model never sees, then resolve and use those values only at approved points of use. Also supports blind web capture, SSH key provisioning, and writes to .env files, SQL databases, and APIs, with the agent receiving only structural results.1339 npm1MITWhy this server?
The gateway uses vaulted credential storage for rotating secrets like GitHub tokens in place.
AlicenseAqualityBmaintenanceThis MCP server preserves a Bearer principal on every tool call and SSE frame, rotates vaulted credentials in place, and enforces per-tool allowlists for agents.3MITWhy this server?
Provides tools for reading secrets and metadata from HashiCorp Vault KV secrets engine, including listing paths, reading secret versions, and checking server health.
AlicenseAqualityDmaintenanceA read-only MCP server that provides tools to read, list, and inspect secrets from HashiCorp Vault's KV secrets engine (versions 1 and 2) using a Vault token.5MITWhy this server?
Provides tools for managing secrets in HashiCorp Vault, including reading, writing, listing, and deleting secrets at specified paths.
AlicenseAqualityDmaintenanceEnables interaction with HashiCorp Vault to read, write, list, and delete secrets through a containerized MCP server with secure token-based authentication.41 npmMITWhy this server?
Integrates with HashiCorp Vault as a secret manager for retrieving secrets without storing them in collections.
AlicenseAqualityAmaintenanceAPI client for coding agents. Sends saved HTTP, GraphQL and gRPC requests, runs collections with their checks, and creates or edits requests over stdio or loopback HTTP, with secret values redacted and calls limited to an allowlist of hosts.1656MITWhy this server?
Resolves secrets from HashiCorp Vault via the authenticated `vault` CLI using `vault://path#field` references; read-only access for injecting secrets into shell child processes at exec time.
AlicenseAqualityBmaintenanceEnables running shell commands and persistent sessions with secrets stored in local secure storage injected into child processes at exec time based on rules. Guarantees secret plaintext never reaches the model context, returning only names, masks, and redacted output.161MITWhy this server?
Integrates with HashiCorp Vault to securely retrieve database credentials for connections.
AlicenseAqualityBmaintenanceAn MCP server that gives AI agents access to configured databases (PostgreSQL, MySQL, Redshift, SQL Server) with SSH/AWS SSM tunnels, pluggable secret providers, and strict per-instance isolation.1080 npmMIT