HashiCorp Vault MCP Server
The official HashiCorp Vault MCP server lets AI assistants read, write, list, and delete secrets in Vault's KV engine through a safe, auditable MCP interface. Supports both stdio and HTTP transports, TLS encryption, and CORS controls.
Prerequisites
MCP-compatible client, HashiCorp Vault server, Vault token with appropriate permissions, Go 1.24+ or Docker
Installation
Use the upstream install or setup path that matches your environment:
- git clone https://github.com/hashicorp/vault-mcp-server.git
- make build
- make run-http
- make docker-build
Requirements and caveats from upstream:
- Docker
- "command": "docker",
Working with Docker
Basic usage or getting-started notes:
Go 1.24 or later (if building from source)
HashiCorp Vault server running locally or remotely
A valid Vault token with appropriate permissions
Extracted from upstream docs: https://raw.githubusercontent.com/hashicorp/vault-mcp-server/HEAD/README.md