MCP Server Vault runs on your own machine — the client starts it, so there is no endpoint to ping.
Bitwarden/Vaultwarden for agents: list tagged items, TOTP codes, one-time Sends, save new secrets.
The linked repository no longer exists on GitHub — it was deleted or made private.
This one has been quiet for a while
Quiet is not dead — but it is worth knowing when it wakes up, or when someone else takes it over. We watch the repository and tell you either way.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-server-vault -e 'VAULT_REGION=<VAULT_REGION>' -e 'VAULT_CLIENT_ID=<VAULT_CLIENT_ID>' -e 'VAULT_CLIENT_SECRET=<VAULT_CLIENT_SECRET>' -e 'VAULT_MASTER_PASSWORD=<VAULT_MASTER_PASSWORD>' -- npx -y @aiwerk/mcp-server-vault{
"mcpServers": {
"mcp-server-vault": {
"command": "npx",
"args": [
"-y",
"@aiwerk/mcp-server-vault"
],
"env": {
"VAULT_CLIENT_ID": "<VAULT_CLIENT_ID>",
"VAULT_CLIENT_SECRET": "<VAULT_CLIENT_SECRET>",
"VAULT_MASTER_PASSWORD": "<VAULT_MASTER_PASSWORD>",
"VAULT_REGION": "<VAULT_REGION>"
}
}
}
}[mcp_servers.mcp-server-vault]
command = "npx"
args = ["-y", "@aiwerk/mcp-server-vault"]
env = { VAULT_REGION = "<VAULT_REGION>", VAULT_CLIENT_ID = "<VAULT_CLIENT_ID>", VAULT_CLIENT_SECRET = "<VAULT_CLIENT_SECRET>", VAULT_MASTER_PASSWORD = "<VAULT_MASTER_PASSWORD>" }{
"mcpServers": {
"mcp-server-vault": {
"command": "npx",
"args": [
"-y",
"@aiwerk/mcp-server-vault"
],
"env": {
"VAULT_CLIENT_ID": "<VAULT_CLIENT_ID>",
"VAULT_CLIENT_SECRET": "<VAULT_CLIENT_SECRET>",
"VAULT_MASTER_PASSWORD": "<VAULT_MASTER_PASSWORD>",
"VAULT_REGION": "<VAULT_REGION>"
}
}
}
}{
"servers": {
"mcp-server-vault": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@aiwerk/mcp-server-vault"
],
"env": {
"VAULT_CLIENT_ID": "<VAULT_CLIENT_ID>",
"VAULT_CLIENT_SECRET": "<VAULT_CLIENT_SECRET>",
"VAULT_MASTER_PASSWORD": "<VAULT_MASTER_PASSWORD>",
"VAULT_REGION": "<VAULT_REGION>"
}
}
}
}Put your own values in place of
<VAULT_REGION> (Bitwarden region or self-hosted mode (e.g. us, eu, or self-hosted)), <VAULT_CLIENT_ID> (Bitwarden API client_id (personal API key)), <VAULT_CLIENT_SECRET> (Bitwarden API client_secret (personal API key)), <VAULT_MASTER_PASSWORD> (Vault master password, used to unlock and decrypt items).
The author’s registry entry marks them as required.
Optional settings from the registry entry, left out of the block above:
VAULT_API_BASE (Base URL for self-hosted Vaultwarden, scheme+host only (e.g. https://pass.example.com). Omit for Bitwarden cloud).
Alternatives to MCP Server Vault
same job, measured the same wayReal email inboxes for AI agents: open an address, read the one-time code, send mail.
Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.
Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes
Browser + dev-server logs on one correlated timeline, for Claude Code and AI agents.
Rent a real UK phone number and receive SMS/OTP codes — built for AI coding agents.
MCP server for Enpass vaults: entries, passwords and TOTP/2FA codes, keychain-backed.
Send SMS, verify phone numbers with one-time codes (OTP) and manage contacts in Israel.
Receive-only inbox for AI agent sign-ups: one call returns the verification code. Never sends.
MCP Server Vault — questions
Answers built from our own checks of this server.