English Français العربية

io.github.KN0WBOT/clavis

Official registry Security

Encrypted credential vault for AI agents — auto OAuth refresh, rate limiting, audit logging.

Source code Documentation

What can you do with io.github.KN0WBOT/clavis?

  • 🔐 Encrypted credential storage (AES-128-CBC + HMAC-SHA256, via Fernet)
  • 🛡️ Server-side credential injection — the raw key never enters the conversation
  • 🔄 Automatic OAuth token refresh
  • 📡 Thin forwarding layer — rate limiting, audit logging, and usage tracking are all handled by the Clavis server

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @clavisagent/mcp-server
Claude Code 
claude mcp add clavis -- npx -y @clavisagent/mcp-server@0.1.3
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "clavis": {
            "command": "npx",
            "args": [
                "-y",
                "@clavisagent/mcp-server@0.1.3"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. Clavis MCP Server
  2. Features
  3. Installation
  4. Usage with Claude Desktop
  5. Usage with Claude Code
  6. Configuration
  7. Available Tools
  8. License

Clavis MCP Server

Secure credential management for Claude Desktop and MCP servers.

Features

  • 🔐 Encrypted credential storage (AES-128-CBC + HMAC-SHA256, via Fernet)
  • 🛡️ Server-side credential injection — the raw key never enters the conversation
  • 🔄 Automatic OAuth token refresh
  • 📡 Thin forwarding layer — rate limiting, audit logging, and usage tracking are all handled by the Clavis server

Installation

npx @clavisagent/mcp-server

Or install globally:

npm install -g @clavisagent/mcp-server

Usage with Claude Desktop

Add the following to your Claude Desktop configuration file (claude_desktop_config.json):

{
  "mcpServers": {
    "clavis": {
      "command": "npx",
      "args": ["-y", "@clavisagent/mcp-server"],
      "env": {
        "CLAVIS_API_KEY": "eyJ..."
      }
    }
  }
}

Usage with Claude Code

claude mcp add clavis -- npx -y @clavisagent/mcp-server

Configuration

VariableRequiredDefaultDescription
CLAVIS_API_KEYyes—Your Clavis JWT, from POST /v1/auth/login. Not the cla_… key shown at sign-up.
CLAVIS_API_URLnohttps://clavisagent.comBase URL of your Clavis instance. Set this for self-hosted deployments.

Available Tools

ToolDescription
call_serviceRecommended. Make an API call with server-side credential injection — the credential is injected into the upstream request server-side, so the raw key never enters the conversation.
get_credentialsLegacy. Returns the raw access token or API key for a named service. Prefer call_service.
list_servicesList all services with stored credentials
check_credential_statusCheck the status and expiry of credentials for a service
Security note

Prefer call_service over get_credentials. call_service keeps the secret server-side, so a prompt injection has no credential in context to exfiltrate. get_credentials places the raw key in the conversation and exists only for callers that must hold the token themselves.

License

MIT

Frequently asked questions

What is io.github.KN0WBOT/clavis?

Encrypted credential vault for AI agents — auto OAuth refresh, rate limiting, audit logging.

How do I install io.github.KN0WBOT/clavis?

It runs on your machine. In Claude Code: claude mcp add clavis -- npx -y @clavisagent/mcp-server@0.1.3. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.KN0WBOT/clavis need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.KN0WBOT/clavis open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.KN0WBOT/clavis?

It is published by KN0WBOT. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.