geopolitis/MCP-f-SecretsEnables secure management of agent-scoped secrets in HashiCorp Vault through MCP protocol. Provides per-agent namespacing, multiple authentication methods (API key, JWT, mTLS), and optional encryption/decryption capabilities with built-in rate limiting.
VAULT_TOKENVAULT_ROLE_ID · VAULT_SECRET_IDHOSTstringOPTIONALdefault: 127.0.0.1PORTstringOPTIONALdefault: 8000RELOADstringOPTIONALdefault: falseKV_MOUNTstringOPTIONALdefault: secretLOG_LEVELstringOPTIONALdefault: infoJWT_ISSUERstringOPTIONALVAULT_ADDRstringOPTIONALdefault: http://localhost:8200VAULT_TOKENstringOPTIONALJWT_AUDIENCEstringOPTIONALAPI_KEYS_JSONstringOPTIONALVAULT_ROLE_IDstringOPTIONALDEFAULT_PREFIXstringOPTIONALdefault: mcpCHILD_TOKEN_TTLstringOPTIONALdefault: 90sVAULT_NAMESPACEstringOPTIONALVAULT_SECRET_IDstringOPTIONALAUTH_JWT_ENABLEDstringOPTIONALdefault: trueJWT_HS256_SECRETstringOPTIONALAUTH_MTLS_ENABLEDstringOPTIONALdefault: falseMTLS_VERIFY_HEADERstringOPTIONALdefault: x-ssl-client-verifyRATE_LIMIT_ENABLEDstringOPTIONALdefault: trueCHILD_TOKEN_ENABLEDstringOPTIONALdefault: falseRATE_LIMIT_REQUESTSstringOPTIONALdefault: 60AUTH_API_KEY_ENABLEDstringOPTIONALdefault: trueMTLS_IDENTITY_HEADERstringOPTIONALdefault: x-ssl-client-s-dnMTLS_SUBJECT_CN_PREFIXstringOPTIONALdefault: CN=CHILD_TOKEN_POLICY_PREFIXstringOPTIONALdefault: mcp-agent-RATE_LIMIT_WINDOW_SECONDSstringOPTIONALdefault: 60Create a free RNWY account to connect your on-chain identity to this server. MCP server claiming is coming; register now and you'll be first in line.
Create your account →