English Français العربية

Vault MCP

Official registry Other

MCP server for credential isolation — bots use passwords and API keys without seeing them

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package chillai-vault-mcp
Claude Code 
claude mcp add vault-mcp -- npx -y chillai-vault-mcp@0.2.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "vault-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "chillai-vault-mcp@0.2.1"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. zerocreds-mcp
  2. How it works
  3. Setup
  4. Environment variables
  5. Tools
  6. Example agent flow
  7. Self-hosting
  8. License

zerocreds-mcp

MCP server for ZeroCreds — collect credentials from users without exposing them to the LLM.

How it works

Claude                    ZeroCreds Server            User
  │                            │                        │
  ├─zerocreds_create_session──►│                        │
  │◄─{ token, url }────────────┤                        │
  │                            │                        │
  │  "Please fill: <url>"──────────────────────────────►│
  │                            │◄──── form submit ───────┤
  │                            │  (credentials saved)    │
  │                            │                        │
  ├─zerocreds_check_status─────►│                        │
  │◄─{ status: "done" }────────┤                        │
  │                            │                        │
  │  (proceeds — never saw the credentials)

Setup

npm install -g zerocreds-mcp

Add to ~/.claude/mcp.json (Claude Code) or Claude Desktop config:

{
  "mcpServers": {
    "zerocreds": {
      "command": "zerocreds-mcp",
      "env": {
        "ZEROCREDS_URL": "https://zerocreds.ru",
        "ZEROCREDS_TOKEN": "your-admin-or-integrator-token",
        "ZEROCREDS_DEFAULT_DESTINATION": "local-dev",
        "ZEROCREDS_TG_BOT_TOKEN": "optional — sends link via Telegram",
        "ZEROCREDS_TG_CHAT_ID": "optional"
      }
    }
  }
}

Environment variables

VariableRequiredDescription
ZEROCREDS_URLnoServer URL (default: https://zerocreds.ru)
ZEROCREDS_TOKENyesAdmin or integrator token
ZEROCREDS_DEFAULT_DESTINATIONnoDefault destination name (default: local-dev)
ZEROCREDS_TG_BOT_TOKENnoTelegram bot token — auto-sends the link
ZEROCREDS_TG_CHAT_IDnoTelegram chat ID

Tools

zerocreds_create_session

Creates a one-time form session. Returns { token, url, expires_at }.

Claude shows url to the user, then polls zerocreds_check_status every 5–10 seconds.

Parameters:

  • title (required) — form heading
  • fields (required) — array of { name, label, type?, placeholder?, required?, level? }
  • description — optional subtext
  • destination — named destination from server config; overrides env default
  • ttl_minutes — link expiry (default: 30)

Field types: text, password, email, tel, number, textarea, url

Field levels (optional, shown to user as privacy indicator): secret · pii · attribute · credential

zerocreds_check_status

Polls session status. Returns { status: "pending" | "done" | "expired" }.

Example agent flow

User: "Log me into GitHub"

Claude: [zerocreds_create_session]
  title: "Connect GitHub"
  fields: [
    { name: "token", label: "Personal Access Token", type: "password" }
  ]
→ { token: "abc123", url: "https://zerocreds.ru/f/abc123" }

Claude: "Please fill in your token here: https://zerocreds.ru/f/abc123"

[polls zerocreds_check_status every 5s]
→ { status: "done" }

Claude: "GitHub connected! Proceeding..."
[reads token from secret store via configured destination]

Self-hosting

See zerocreds-server to run your own instance.

License

MIT

Frequently asked questions

What is Vault MCP?

MCP server for credential isolation — bots use passwords and API keys without seeing them

How do I install Vault MCP?

It runs on your machine. In Claude Code: claude mcp add vault-mcp -- npx -y chillai-vault-mcp@0.2.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Vault MCP need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is Vault MCP open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Vault MCP?

It is published by Chill-AI-Space. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.