SanctumAI — Credential Vault for AI Agents
Credential vault for AI agents — encrypted storage, lease-based access, CRP support.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
@sanctumai/mcp-serverclaude mcp add sanctumai-credential-vault-for-ai-agents -e 'SANCTUM_VAULT_PATH=<SANCTUM_VAULT_PATH>' -e 'SANCTUM_PASSPHRASE=<your sanctum_passphrase>' -- npx -y @sanctumai/mcp-server@0.3.2
{
"mcpServers": {
"sanctumai-credential-vault-for-ai-agents": {
"command": "npx",
"args": [
"-y",
"@sanctumai/mcp-server@0.3.2"
],
"env": {
"SANCTUM_VAULT_PATH": "<SANCTUM_VAULT_PATH>",
"SANCTUM_PASSPHRASE": "<your sanctum_passphrase>"
}
}
}
}
Environment variables
SANCTUM_VAULT_PATHPath to the SanctumAI vault directory. Defaults to ~/.sanctumSANCTUM_PASSPHRASEsecret Vault passphrase for automated/headless operation. If not set, the vault must be unlocked interactively or via the web UI.
Frequently asked questions
What is SanctumAI — Credential Vault for AI Agents?
Credential vault for AI agents — encrypted storage, lease-based access, CRP support.
How do I install SanctumAI — Credential Vault for AI Agents?
It runs on your machine. In Claude Code: claude mcp add sanctumai-credential-vault-for-ai-agents -e 'SANCTUM_VAULT_PATH=<SANCTUM_VAULT_PATH>' -e 'SANCTUM_PASSPHRASE=<your sanctum_passphrase>' -- npx -y @sanctumai/mcp-server@0.3.2. For other clients, paste the JSON configuration from this page into their MCP settings.
Does SanctumAI — Credential Vault for AI Agents need an API key?
Yes. It expects SANCTUM_PASSPHRASE, which you set in its configuration.
Is SanctumAI — Credential Vault for AI Agents open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains SanctumAI — Credential Vault for AI Agents?
It is published by SanctumSec. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.