Skip to main content
Watch: I Built an AI App Without Leaving Databricks

Auth and security - official HashiCorp (Terraform, Vault) server

Vault Radar MCP server

Locally run MCP server that lets agents query an HCP Vault Radar project for data sources, resources, secret-leak events, and detected secret types. It runs locally from docker.io/hashicorp/vault-radar-mcp-server (oci) with API key auth.

Last verified 4 tools3 sources

Install

VS Code

JSON
{
    "mcp": {
        "servers": {
            "vault-radar": {
                "command": "docker",
                "args": [
                    "run",
                    "--rm",
                    "-i",
                    "-e", "HCP_PROJECT_ID=<HCP Project ID>",
                    "-e", "HCP_CLIENT_ID=<HCP Service Principal Client ID>",
                    "-e", "HCP_CLIENT_SECRET=<HCP Service Principal Client Secret>",
                    "hashicorp/vault-radar-mcp-server:<tag>",
                ]
            }
        }
    }
}

Generic

JSON
{
    "mcpServers": {
        "vault-radar": {
            "command": "docker",
            "args": [
                    "run",
                    "--rm",
                    "-i",
                    "-e", "HCP_PROJECT_ID=<HCP Project ID>",
                    "-e", "HCP_CLIENT_ID=<HCP Service Principal Client ID>",
                    "-e", "HCP_CLIENT_SECRET=<HCP Service Principal Client Secret>",
                    "hashicorp/vault-radar-mcp-server:<tag>",
            ]
        }
    }
}

Tools

query_vault_radar_data_sources
Query all data sources available in the Vault Radar project.
query_vault_radar_resources
Query all resources in the HCP Vault Radar project.
query_vault_radar_events
Query all events in the HCP Vault Radar project.
list_vault_radar_secret_types
List the detected secret types in the HCP Vault Radar project.

As documented on October 17, 2026. A running server reports its current list through tools/list.

Notes and caveats

  • Docs label it a beta release and strongly discourage production use.
  • Requires an HCP Vault Radar project and an HCP service principal (viewer role) with client ID and secret.
  • Distributed as a Docker image or binary from releases.hashicorp.com; no public source repo was found.
  • The documented JSON snippets contain a trailing comma after the image argument, copied verbatim; the generic snippet is the one HashiCorp documents for Claude Desktop.

More MCP servers for auth and security

Related reading

FAQ

What does the Vault Radar MCP server do?

Locally run MCP server that lets agents query an HCP Vault Radar project for data sources, resources, secret-leak events, and detected secret types. The vendor documents 4 tools, including query_vault_radar_data_sources, query_vault_radar_resources, query_vault_radar_events and list_vault_radar_secret_types.

How do I add the Vault Radar MCP server to VS Code?

HashiCorp (Terraform, Vault) documents a VS Code config; copy it from the VS Code section of this page. Snippets for Generic are there too.

Does the Vault Radar MCP server need authentication?

Yes, API key. Transport: stdio. Status: Beta, last checked October 17, 2026.

Sources

Last verified against 3 HashiCorp (Terraform, Vault) pages, then re-checked independently.

Newsletter

New MCP servers, the week they ship

One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.