Skip to main content
Glama
Sign In
Vault MCP

Vault MCP

by Zerocreds-com
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

zerocreds-mcp

MCP server for ZeroCreds — collect credentials from users without exposing them to the LLM.

How it works

Claude                    ZeroCreds Server            User
  │                            │                        │
  ├─zerocreds_create_session──►│                        │
  │◄─{ token, url }────────────┤                        │
  │                            │                        │
  │  "Please fill: <url>"──────────────────────────────►│
  │                            │◄──── form submit ───────┤
  │                            │  (credentials saved)    │
  │                            │                        │
  ├─zerocreds_check_status─────►│                        │
  │◄─{ status: "done" }────────┤                        │
  │                            │                        │
  │  (proceeds — never saw the credentials)

Related MCP server: Coffer MCP

Setup

npm install -g zerocreds-mcp

Add to ~/.claude/mcp.json (Claude Code) or Claude Desktop config:

{
  "mcpServers": {
    "zerocreds": {
      "command": "zerocreds-mcp",
      "env": {
        "ZEROCREDS_URL": "https://zerocreds.ru",
        "ZEROCREDS_TOKEN": "your-admin-or-integrator-token",
        "ZEROCREDS_DEFAULT_DESTINATION": "local-dev",
        "ZEROCREDS_TG_BOT_TOKEN": "optional — sends link via Telegram",
        "ZEROCREDS_TG_CHAT_ID": "optional"
      }
    }
  }
}

Environment variables

Variable

Required

Description

ZEROCREDS_URL

no

Server URL (default: https://zerocreds.ru)

ZEROCREDS_TOKEN

yes

Admin or integrator token

ZEROCREDS_DEFAULT_DESTINATION

no

Default destination name (default: local-dev)

ZEROCREDS_TG_BOT_TOKEN

no

Telegram bot token — auto-sends the link

ZEROCREDS_TG_CHAT_ID

no

Telegram chat ID

Tools

zerocreds_ensure_server

Ensures the ZeroCreds MCP server is running. If it is not already running, this tool starts it in the background and waits for it to become ready.

Parameters: None.

Returns:

{
  "status": "already_running | started | error | timeout",
  "pid": 12345,
  "message": "ZeroCreds MCP server is already running."
}

Use case: Call this before zerocreds_create_session if you are unsure the server is running. It is idempotent — calling it multiple times is safe.

zerocreds_create_session

Creates a one-time form session. Returns { token, url, expires_at }.

Claude shows url to the user, then polls zerocreds_check_status every 5–10 seconds.

Parameters:

  • title (required) — form heading

  • fields (required) — array of { name, label, type?, placeholder?, required?, level? }

  • description — optional subtext

  • destination — named destination from server config; overrides env default

  • ttl_minutes — link expiry (default: 30)

Field types: text, password, email, tel, number, textarea, url

Field levels (optional, shown to user as privacy indicator): secret · pii · attribute · credential

zerocreds_check_status

Polls session status. Returns { status: "pending" | "done" | "expired" }.

Example agent flow

User: "Log me into GitHub"

Claude: [zerocreds_create_session]
  title: "Connect GitHub"
  fields: [
    { name: "token", label: "Personal Access Token", type: "password" }
  ]
→ { token: "abc123", url: "https://zerocreds.ru/f/abc123" }

Claude: "Please fill in your token here: https://zerocreds.ru/f/abc123"

[polls zerocreds_check_status every 5s]
→ { status: "done" }

Claude: "GitHub connected! Proceeding..."
[reads token from secret store via configured destination]

Self-hosting

See zerocreds-server to run your own instance.

Scripts

Script

Description

scripts/ensure-server.sh

Starts the ZeroCreds MCP server if it is not already running. Idempotent.

scripts/health-check.sh

Verifies the server process is alive and the admin token file exists.

Run them from the repository root:

./scripts/ensure-server.sh
./scripts/health-check.sh

Or use the npm scripts:

npm run ensure-start
npm run health-check

License

MIT

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    This server cannot be deployed

    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Maintenance

    ActivityMaintained
    ResponsivenessLimited data

    Resources

    Related MCP Connectors

    Related MCP Servers

    • Credential Vault MCP

      CipherSatoru
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables secure credential storage for AI agents by encrypting secrets and providing agent-invisible references, ensuring sensitive data never leaks to the model.
      MIT

    • Coffer MCP

      annawhooo
      A
      license
      Not graded
      quality
      D
      maintenance
      Credential vault for LLM agents that stores credentials encrypted and exposes MCP tools for authenticated HTTP requests, web scraping, and credential management, preventing AI assistants from seeing secrets.
      Apache 2.0

    • agent-auth

      ex-nihilo-labs
      A
      license
      Not graded
      quality
      D
      maintenance
      Zero-knowledge credential injection for AI agents. Your agent authenticates to websites and APIs without ever seeing a password, TOTP code, or API key.
      15 npm
      1
      MIT

    • AI Service Gateway MCP

      Yormede
      A
      license
      Not graded
      quality
      D
      maintenance
      Enables AI agents to securely access authenticated services (HTTP, SSH, SMTP) without exposing secrets, by acting as a server-side proxy that injects authentication.
      MIT