Best Vault MCP Servers
Vault is a product by HashiCorp that provides secure access to secrets and sensitive data using collaborative governance and encryption.
Why this server?
Provides a team vault for storing and rotating secrets, which can be referenced in deployments using vault:// references.
AlicenseAqualityAmaintenanceEnables AI coding agents to instantly provision ephemeral developer infrastructure like Postgres, Redis, MongoDB, and container deployments over HTTPS, with no Docker or signup required for the free anonymous tier.31MITWhy this server?
Detects and redacts HashiCorp Vault tokens in text.

classifinder-mcpofficial
AlicenseAqualityBmaintenanceEnables AI agents to scan text for leaked secrets and prompt injection markers, and redact them before reaching an LLM.21MITWhy this server?
Provides tools for managing secrets in HashiCorp Vault, including reading, writing, listing, and deleting secrets at specified paths.
AlicenseAqualityDmaintenanceEnables interaction with HashiCorp Vault to read, write, list, and delete secrets through a containerized MCP server with secure token-based authentication.49MITWhy this server?
Integrates with HashiCorp Vault to securely retrieve database credentials for connections.
AlicenseAqualityAmaintenanceAn MCP server that gives AI agents access to configured databases (PostgreSQL, MySQL, Redshift, SQL Server) with SSH/AWS SSM tunnels, pluggable secret providers, and strict per-instance isolation.1049MITWhy this server?
Allows fetching credentials from HashiCorp Vault instead of environment variables for configuration, enabling secure credential management.
AlicenseBqualityBmaintenanceMCP server for Nextcloud that exposes occ admin commands, OCS provisioning, and WebDAV file operations as tools.31MITWhy this server?
Detects leaked HashiCorp Vault tokens in code or diffs to prevent accidental exposure.
AlicenseAqualityBmaintenanceEnables scanning diffs or code blobs for leaked secrets, returning a verdict with severity and masked findings, all processed locally with no data sent externally.1MITWhy this server?
Integrates with HashiCorp Vault for fetching PostgreSQL credentials securely using AppRole authentication, eliminating the need to store passwords in environment variables or config files.
AlicenseAqualityCmaintenanceA comprehensive PostgreSQL MCP server providing 27 tools for database management and administration, including connection management, query execution, schema introspection, CRUD operations, and server monitoring.2738AGPL 3.0Why this server?
Provides tools for managing secrets, cryptographic keys, and tokens in Vault, including retrieving, listing, and deleting items, as well as generating symmetric or asymmetric keys.

Pangea MCP Serverofficial
Alicense-qualityFmaintenanceA Model Context Protocol server that provides Claude with access to Pangea's security services, including AI Guard, Domain Intel, Embargo checks, IP Intelligence, Redaction, Secure Audit Log, URL Intelligence, and Vault services.21Apache 2.0Why this server?
Provides tools for reading secrets and metadata from HashiCorp Vault KV secrets engine, including listing paths, reading secret versions, and checking server health.
FlicenseAqualityCmaintenanceA read-only MCP server that provides tools to read, list, and inspect secrets from HashiCorp Vault's KV secrets engine (versions 1 and 2) using a Vault token.5