Hive Vault

Official registry Finance and payments

A2A ZK wallet recovery — guardian swarm, no seed phrase, HiveLaw enforcement

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code
claude mcp add --transport http hive-vault 'https://hive-mcp-vault.onrender.com/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "hive-vault": {
            "type": "http",
            "url": "https://hive-mcp-vault.onrender.com/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. hive-mcp-vault
  2. Live contract
  3. Discovery and health
  4. Persistence
  5. Environment variables
  6. Testing
  7. Brand
  8. Directory

hive-mcp-vault

MCP access to confirmed HiveVault FENR reads and an AES-256-GCM encrypted item store.

Live contract

The server exposes four read-only MCP tools backed by the live HiveVault service:

ToolLive backend route
vault.balanceGET /vault/balance
vault.statsGET /vault/stats
vault.identityGET /vault/identity
vault.quantum_pubkeyGET /vault/quantum/pubkey

vault.balance returns the backend response exactly as received. An unauthenticated response can be marked obfuscated: true; clients must not treat that value as a confirmed treasury balance.

The server also exposes an encrypted item store:

MethodPathDescription
POST/v1/vault/storeStore an AES-256-GCM encrypted item after the x402 gate
GET/v1/vault/store/:item_refConfirm a stored item exists without returning plaintext

Unknown paths return HTTP 404. Upstream failures return explicit MCP errors. The service does not return fabricated success payloads.

Discovery and health

MethodPathDescription
GET/healthReadiness. This process plus current upstream reachability. Returns 503 and degraded when the upstream is unreachable
GET/livezLiveness only. This process, no upstream claim. This is the path platform health checks should use
POST/mcpMCP JSON-RPC 2.0, protocol 2024-11-05
GET/.well-known/mcp.jsonMCP discovery manifest
GET/.well-known/agent-card.jsonA2A agent card
GET/.well-known/agent.jsonAgent card
GET/.well-known/oac.jsonOpen Agent Card JSON-LD
GET/llms.txtPlain-text integration guide

Persistence

Set BOGO_DB_PATH to a path on durable storage in production. The default path, /tmp/bogo_vault.db, is suitable only for local development and tests. The server refuses to start in production unless an explicit database path is configured.

Environment variables

VariableRequiredPurpose
PORTNo, default 3000HTTP port
VAULT_BACKEND_URLNo, default https://hive-vault.onrender.comLive HiveVault backend
INTERNAL_KEYYes in productionDerives the local encryption key and is sent to the backend as x-vault-key
BOGO_DB_PATHYes in productionSQLite database path on durable storage. Local development defaults to /tmp/bogo_vault.db
BASE_RPC_URLNo, default https://mainnet.base.orgBase RPC endpoint used for x402 payment verification

The server refuses to start with NODE_ENV=production if INTERNAL_KEY or BOGO_DB_PATH is missing.

Testing

npm install
npm test

Tests cover health reporting, unknown-route handling, MCP tool discovery, upstream failure behavior, encrypted storage, and plaintext absence from the SQLite file.

Brand

Hive Civilization. Brand gold #C08D23. Steve Rotzin.

Directory

Frequently asked questions

What is Hive Vault?

A2A ZK wallet recovery — guardian swarm, no seed phrase, HiveLaw enforcement

How do I install Hive Vault?

It runs as a remote server. In Claude Code: claude mcp add --transport http hive-vault 'https://hive-mcp-vault.onrender.com/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Hive Vault need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is Hive Vault open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains Hive Vault?

It is published by srotzin. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.