MCP server
HashiCorp Vault MCP server
Read and write Vault secrets and manage mounts in HashiCorp Vault.
★ 65pushed 2026-10-24MPL-2.0
Run in a terminal. Everything after -- is the command that starts the server. docs
claude mcp add --transport stdio hashicorp-vault -- docker run -i --rm hashicorp/vault-mcp-server
Claude Desktop only: Settings > Developer > Edit Config opens claude_desktop_config.json. Add this, save and restart the app. docs
{
"mcpServers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project), or use the install button. docs
{
"mcpServers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Add to .vscode/mcp.json (note the "servers" key and the type), or use the install button. Command Palette > "MCP: Open User Configuration" for all workspaces. docs
{
"servers": {
"hashicorp-vault": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Run codex mcp add hashicorp-vault -- docker run -i --rm hashicorp/vault-mcp-server, or add this to ~/.codex/config.toml. docs
[mcp_servers.hashicorp-vault] command = "docker" args = ["run", "-i", "--rm", "hashicorp/vault-mcp-server"]
Run in a terminal (-s user adds it for all projects; the default is this project). docs
gemini mcp add -s user hashicorp-vault docker -- run -i --rm hashicorp/vault-mcp-server
Run in a terminal; it writes ~/.copilot/mcp-config.json. docs
copilot mcp add hashicorp-vault -- docker run -i --rm hashicorp/vault-mcp-server
Add to mcp_config.json: ~/.config/devin/mcp_config.json on macOS and Linux (older installs: ~/.codeium/windsurf/mcp_config.json), %APPDATA%\devin\ on Windows. docs
{
"mcpServers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Add to Zed's settings.json (or Settings > AI > MCP Servers > Add Server). Remote servers without an Authorization header sign in with OAuth. docs
{
"context_servers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Add to opencode.json in the project (or ~/.config/opencode/opencode.json). docs
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"hashicorp-vault": {
"type": "local",
"command": [
"docker",
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
],
"enabled": true
}
}
}Add to ~/.kiro/settings/mcp.json (all projects) or .kiro/settings/mcp.json (this project). docs
{
"mcpServers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}MCP Servers > Configure > Configure MCP Servers opens cline_mcp_settings.json; add this entry. docs
{
"mcpServers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}FAQ
Is there an official HashiCorp Vault MCP server?+
Yes: HashiCorp Vault, maintained by HashiCorp.
How do I connect HashiCorp Vault to Claude?+
In Claude Code, run the claude mcp add command shown above. In Claude Desktop, add the server to claude_desktop_config.json (Settings > Developer > Edit Config) and restart the app.
How do I use the HashiCorp Vault MCP server in Cursor or VS Code?+
Open the Cursor or VS Code tab on the server above: it has the exact mcp.json entry and a one-click install link. The same server also works in Claude Code, Claude Desktop / claude.ai, ChatGPT, Cursor, VS Code and Codex.
Is it safe to give an AI agent access to HashiCorp Vault?+
Start with the official server, a read-only or test account and approval prompts on for anything that writes. Content the agent reads from HashiCorp Vault (tickets, messages, pages) can carry prompt-injection instructions, so don't auto-approve actions.
All security MCP servers · Agent skills · How MCP setup works in each client
MCP servers for similar apps: 1Password · Auth0 · Burp Suite · Clerk · Ghidra · npm · Okta · PyPI · Snyk · Socket · SonarQube · Trivy · WorkOS