Envault runs on your own machine — the client starts it, so there is no endpoint to ping. 81 installs a week from npm. Last commit 15 Jun 2026.
Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.
We read the source, 5 d ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
await fs.writeFile(absoluteTarget, toSortedEnvFile(envMap), "utf-8");
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
postinstall: node postinstall.mjs
const absoluteTarget = path.join(cwd, targetFile);
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
execFileSync(terminalNotifierPath, args, { stdio: "ignore" });
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add envault -e 'ENVAULT_TOKEN=<ENVAULT_TOKEN>' -e 'ENVAULT_BASE_URL=<ENVAULT_BASE_URL>' -- npx -y @dinanathdash/envault-mcp-server
{
"mcpServers": {
"envault": {
"command": "npx",
"args": [
"-y",
"@dinanathdash/envault-mcp-server"
],
"env": {
"ENVAULT_BASE_URL": "<ENVAULT_BASE_URL>",
"ENVAULT_TOKEN": "<ENVAULT_TOKEN>"
}
}
}
}
[mcp_servers.envault]
command = "npx"
args = ["-y", "@dinanathdash/envault-mcp-server"]
env = { ENVAULT_TOKEN = "<ENVAULT_TOKEN>", ENVAULT_BASE_URL = "<ENVAULT_BASE_URL>" }
{
"mcpServers": {
"envault": {
"command": "npx",
"args": [
"-y",
"@dinanathdash/envault-mcp-server"
],
"env": {
"ENVAULT_BASE_URL": "<ENVAULT_BASE_URL>",
"ENVAULT_TOKEN": "<ENVAULT_TOKEN>"
}
}
}
}
{
"servers": {
"envault": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@dinanathdash/envault-mcp-server"
],
"env": {
"ENVAULT_BASE_URL": "<ENVAULT_BASE_URL>",
"ENVAULT_TOKEN": "<ENVAULT_TOKEN>"
}
}
}
}
Put your own values in place of
<ENVAULT_TOKEN> (Required: Generate via Envault Account Settings -> Security -> MCP Token), <ENVAULT_BASE_URL> (Required: https://www.envault.tech).
The author’s registry entry marks them as required.
A secret store for AI agents: the agent never sees the plaintext.
Wisp Panel MCP server for secure game server management through the Wisp Client API.
Secure MCP server for WordPress content management
Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction.
Process management and monitoring for AI agents with strict security boundaries
Encrypted secrets and credential management for agents
The local security layer for coding agents: secret redaction, injection checks and an MCP proxy.
Let AI agents use secrets without seeing them: masked output, every use approved in JFSecure.
Answers built from our own checks of this server.