Policyvault MCP Server

What the code does

We read the source, 3 d ago · rules 995398eba69f

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

 const a=path.join(root,name),b=path.join(pkg,name);

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

    this.proc = spawn(process.execPath, [MCP_SERVER], {

vm.compileFunction(adapted, ["module", "exports", "require", "__dirname", "probeTxId", "probeCompile", "probeP2sh"])(mod, mod.exports, require, __dirname, fixture.request.txId, compile, scripts.p2shSpkHexOf);

      .pv-onb-link-packet { position: absolute; left: -8px; top: 0; width: 18px; height: 18px; border-radius: 50%; background: var(--accent); box-shadow: 0 0 0 4px var(--onb-accent-soft); transform: translateY(22px); animation: pv-onb-drop 1s ease-in-out calc(0.9s + var(--onb-seq) * 1.2s) both; }

        result = subprocess.run(dump_command, stdout=source, stderr=subprocess.PIPE)

  "6c76009c63750111790111790111790111790111790111790111790111790111790111790111790111790111790111790111790111790111790111790137790137790137790137790137790137790137790137790137790137790137790137790137790137790137790137790137790137790137790137797800a2697854a16976827c755196020c039c6…

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add policyvault -e 'POLICYVAULT_MCP_SERVER_URL=<POLICYVAULT_MCP_SERVER_URL>' -e 'POLICYVAULT_MCP_TOKEN=<POLICYVAULT_MCP_TOKEN>' -- npx -y policyvault-mcp

{
  "mcpServers": {
    "policyvault": {
      "command": "npx",
      "args": [
        "-y",
        "policyvault-mcp"
      ],
      "env": {
        "POLICYVAULT_MCP_SERVER_URL": "<POLICYVAULT_MCP_SERVER_URL>",
        "POLICYVAULT_MCP_TOKEN": "<POLICYVAULT_MCP_TOKEN>"
      }
    }
  }
}

[mcp_servers.policyvault]
command = "npx"
args = ["-y", "policyvault-mcp"]
env = { POLICYVAULT_MCP_SERVER_URL = "<POLICYVAULT_MCP_SERVER_URL>", POLICYVAULT_MCP_TOKEN = "<POLICYVAULT_MCP_TOKEN>" }

{
  "mcpServers": {
    "policyvault": {
      "command": "npx",
      "args": [
        "-y",
        "policyvault-mcp"
      ],
      "env": {
        "POLICYVAULT_MCP_SERVER_URL": "<POLICYVAULT_MCP_SERVER_URL>",
        "POLICYVAULT_MCP_TOKEN": "<POLICYVAULT_MCP_TOKEN>"
      }
    }
  }
}

{
  "servers": {
    "policyvault": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "policyvault-mcp"
      ],
      "env": {
        "POLICYVAULT_MCP_SERVER_URL": "<POLICYVAULT_MCP_SERVER_URL>",
        "POLICYVAULT_MCP_TOKEN": "<POLICYVAULT_MCP_TOKEN>"
      }
    }
  }
}

Put your own values in place of <POLICYVAULT_MCP_SERVER_URL> (Bare origin of the PolicyVault server (e.g. https://app.policy-vault.org, or your self-hosted origin). Refused if it embeds credentials or a path), <POLICYVAULT_MCP_TOKEN> (Machine-identity bearer credential (pvmk_...), minted by the vault operator in the PolicyVault app with exactly the scopes the agent should hold. Never logged; deleted from the process environment after being read). The author’s registry entry marks them as required.

Optional settings from the registry entry, left out of the block above: POLICYVAULT_MCP_SCOPES (Optional comma-separated scope list to narrow which tools are advertised (display-side only; enforcement is always server-side)).