MCP server
HashiCorp Vault MCP Server
- Maintainer
- Official · HashiCorp
- Runs
- Local (stdio)
- GitHub
- ★ 65, last push 2026-10-24 (checked 2026-10-24)
- License
- MPL-2.0
- Connects to
- HashiCorp Vault
Install the HashiCorp Vault MCP Server
Pick your client. Each tab starts the same local command. Config shapes checked against each client's docs on 2026-10-25.
Run in a terminal. Everything after -- is the command that starts the server. docs
claude mcp add --transport stdio hashicorp-vault -- docker run -i --rm hashicorp/vault-mcp-server
Claude Desktop only: Settings > Developer > Edit Config opens claude_desktop_config.json. Add this, save and restart the app. docs
{
"mcpServers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project), or use the install button. docs
{
"mcpServers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Add to .vscode/mcp.json (note the "servers" key and the type), or use the install button. Command Palette > "MCP: Open User Configuration" for all workspaces. docs
{
"servers": {
"hashicorp-vault": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Run codex mcp add hashicorp-vault -- docker run -i --rm hashicorp/vault-mcp-server, or add this to ~/.codex/config.toml. docs
[mcp_servers.hashicorp-vault] command = "docker" args = ["run", "-i", "--rm", "hashicorp/vault-mcp-server"]
Run in a terminal (-s user adds it for all projects; the default is this project). docs
gemini mcp add -s user hashicorp-vault docker -- run -i --rm hashicorp/vault-mcp-server
Run in a terminal; it writes ~/.copilot/mcp-config.json. docs
copilot mcp add hashicorp-vault -- docker run -i --rm hashicorp/vault-mcp-server
Add to mcp_config.json: ~/.config/devin/mcp_config.json on macOS and Linux (older installs: ~/.codeium/windsurf/mcp_config.json), %APPDATA%\devin\ on Windows. docs
{
"mcpServers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Add to Zed's settings.json (or Settings > AI > MCP Servers > Add Server). Remote servers without an Authorization header sign in with OAuth. docs
{
"context_servers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Add to opencode.json in the project (or ~/.config/opencode/opencode.json). docs
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"hashicorp-vault": {
"type": "local",
"command": [
"docker",
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
],
"enabled": true
}
}
}Add to ~/.kiro/settings/mcp.json (all projects) or .kiro/settings/mcp.json (this project). docs
{
"mcpServers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}MCP Servers > Configure > Configure MCP Servers opens cline_mcp_settings.json; add this entry. docs
{
"mcpServers": {
"hashicorp-vault": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"hashicorp/vault-mcp-server"
]
}
}
}Security notes
- The local server runs with your user's permissions (it runs in a Docker container, and only the variables passed with -e reach it).
Alternatives
- Burp Suiteofficial · ★ 1.3k
Use Burp Suite from an agent: send requests, read proxy history and scanner issues.
- SonarQubeofficial · ★ 672
Code quality and security issues, quality gates and metrics from SonarQube Cloud or Server.
- Socketofficial · ★ 137
Check npm, PyPI and other packages for supply-chain risk before the agent installs them.
- Auth0official · ★ 121
Manage Auth0 applications, APIs, actions, logs and forms from the agent.
- Oktaofficial · ★ 74
Self-hosted server to manage Okta users, groups, apps, policies and system logs.
- Trivyofficial · ★ 53
Scan filesystems, images and repos for vulnerabilities and misconfigurations with Trivy.
- 1Password Environmentsofficial
Local server in the 1Password app to manage project environment variables, with approval prompts.
- Clerkofficial
Hosted server to manage Clerk apps, users and domains, plus Clerk SDK snippets.
FAQ
What does the HashiCorp Vault MCP Server do?+
Read and write Vault secrets and manage mounts in HashiCorp Vault.
Is the HashiCorp Vault MCP server official?+
Official: built and maintained by HashiCorp.
How do I add HashiCorp Vault to Claude Code?+
Run: claude mcp add hashicorp-vault -- docker run -i --rm hashicorp/vault-mcp-server. Add --scope project to share it with your team through .mcp.json.
How do I use the HashiCorp Vault MCP server in Cursor or VS Code?+
Open the Cursor or VS Code tab above: it has the mcp.json entry and a one-click install link. Cursor uses the "mcpServers" key; VS Code uses "servers" and needs a type ("stdio").
Does HashiCorp Vault work in ChatGPT and claude.ai?+
No: it runs locally over stdio, and ChatGPT and claude.ai only connect to remote servers. Use it in Claude Desktop, Claude Code, Cursor, VS Code or another client that can start a local process.
What are the alternatives to the HashiCorp Vault MCP server?+
Other security MCP servers: Burp Suite, SonarQube, Socket, Auth0 and Okta.