Skip to main content
Watch: I Built an AI App Without Leaving Databricks

Auth and security - official HashiCorp (Terraform, Vault) server

Vault MCP server

Self-hosted MCP server that lets agents manage Vault mounts, read and write KV secrets, and configure the PKI secrets engine (issuers, roles, certificate issuance) against a Vault server. It runs locally from docker.io/hashicorp/vault-mcp-server (oci) with API key auth.

Last verified 15 tools5 sources

Install

VS Code

JSON
{
    "inputs": [
    {
        "type": "promptString",
        "id": "vault_token",
        "description": "Vault Token",
        "password": true
    },
    {
        "type": "promptString",
        "id": "vault_namespace",
        "description": "Vault Namespace (optional)",
        "password": false
    },
    {
        "type": "promptString",
        "id": "vault_addr",
        "description": "Vault Address (optional)",
        "password": false
    }
    ],
    "servers": {
    "vault-mcp-server": {
        "command": "docker",
        "args": [
            "run",
            "-i",
            "--rm",
            "-e", "VAULT_ADDR=${input:vault_addr}",
            "-e", "VAULT_TOKEN=${input:vault_token}",
            "-e", "VAULT_NAMESPACE=${input:vault_namespace}",
            "hashicorp/vault-mcp-server"
            ]
        }
    }
}

Tools

create_mount
Create a new mount in Vault (kv, kv2, pki).
list_mounts
List all mounts in Vault.
delete_mount
Delete a mount in Vault.
list_secrets
List secrets in a KV mount under a path.
read_secret
Read a secret from a KV mount.
write_secret
Write a secret to a KV mount.
delete_secret
Delete a secret or key in a KV mount.
enable_pki
Enable and configure a PKI secrets engine.
create_pki_issuer
Create a new PKI issuer.
list_pki_issuers
List PKI issuers in a mount.
read_pki_issuer
Read details about a PKI issuer.
create_pki_role
Create a PKI role for issuing certificates.
list_pki_roles
List PKI roles in a mount.
delete_pki_role
Delete a PKI role.
issue_pki_certificate
Issue a certificate using a PKI role.

As documented on October 17, 2026. A running server reports its current list through tools/list.

Notes and caveats

  • Docs label it a Beta feature and 'strongly discourage using beta features in production deployments of Vault.' README says it is intended for local use only in trusted networks; set MCP_ALLOWED_ORIGINS when using Streamable HTTP.
  • Authenticates with a Vault token (VAULT_TOKEN env var in stdio mode, or X-Vault-Token header in HTTP mode) plus VAULT_ADDR and optional namespace.
  • Only a VS Code snippet is documented (stdio variant shown; an HTTP variant pointing at http://localhost:8080/mcp also exists).

More MCP servers for auth and security

Related reading

FAQ

What does the Vault MCP server do?

Self-hosted MCP server that lets agents manage Vault mounts, read and write KV secrets, and configure the PKI secrets engine (issuers, roles, certificate issuance) against a Vault server. The vendor documents 15 tools, including create_mount, list_mounts, delete_mount and list_secrets.

How do I add the Vault MCP server to VS Code?

HashiCorp (Terraform, Vault) documents a VS Code config; copy it from the VS Code section of this page.

Does the Vault MCP server need authentication?

Yes, API key. Transport: stdio, Streamable HTTP. Status: Beta, last checked October 17, 2026.

Sources

Last verified against 5 HashiCorp (Terraform, Vault) pages, then re-checked independently.

Newsletter

New MCP servers, the week they ship

One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.