Wundervault MCP

A zero-knowledge secrets vault for AI agents. Every API key you paste into an agent chat or a .env file ends up in context windows, transcripts, and provider logs. Wundervault's answer: the agent never receives the secret at all. It asks for work - "run this deploy with the key injected" - and a local daemon decrypts the secret, injects it into the subprocess environment, zeroes the buffer, and scrubs the output…. Its README documents 6 tools, including vault_entries_list, vault_entry_get, vault_exec.

People who work with secrets management, vault and zero knowledge and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-14 · ★ 2 · #64 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18

AGPL-3.0 · TypeScript servers · how we verify → /methodology

01 · Install Wundervault MCP

before you install - you'll need

Set WUNDERVAULT_AGENT_NAME, WUNDERVAULT_MOCK before connecting.

Claude Code

claude mcp add wundervault-wundervault-mcp -- npx -y @wundervault/mcp-server

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "wundervault-wundervault-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@wundervault/mcp-server"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license AGPL-3.0 - declared in the repository

npm package @wundervault/mcp-server - published under the repo owner's npm scope (@wundervault)

registry namespace io.github.wundervault is GitHub-verified and matches the repo owner

03 · What Wundervault MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can list all vault entries available to this agent. Returns entry IDs and secret names - no values, and retrieve and decrypt a vault secret. Optionally execute a command with it.

The 6 tools it gives your agent

Extracted from the project's README - what wundervault-mcp lets an agent do.

vault_entries_list: - List all vault entries available to this agent. Returns entry IDs and secret names - no values.
vault_entry_get: - Retrieve and decrypt a vault secret. Optionally execute a command with it.
vault_exec: - Execute a shell command with a vault secret injected as an env var - locally or on a remote host over SSH. The secret is injected into the subprocess and the bu
vault_entry_inject_env: - Write a vault secret directly into a config file (~/.npmrc, ~/.netrc, ~/.docker/config.json, or a project .env) without the plaintext passing through the agent.
vault_rsync: - Sync a local directory to a remote host using rsync over SSH, with the SSH key fetched from the vault (temp keyfile deleted immediately after transfer).
vault_entry_forget: - Discard a local reference. No-op on the server.

Latest releases

v1.7.2 · 2026-09-14

v1.7.1 · 2026-09-09

One connected agent per credential is a security rule, and a PID file could not carry it: it can be deleted while the holder is live, reading-then-writing it is a race, the PID it names can be recycled, and identifying…

v1.6.8 · 2026-06-15

Adds WUNDERVAULT_MOCK demo mode (off by default) so directory scanners / CI (Glama) can build and introspect all 6 tools without the local wundervault-agent daemon or credentials. Production behavior unchanged. This…

04 · Who maintains Wundervault MCP

wundervault-mcp is maintained by wundervault. It's the only MCP server we track from this author; the repo dates to Jun 2026.

05 · Facts

repository: github.com/wundervault/wundervault-mcp
website: https://wundervault.com/
category: security - ranked #64 of 204 actively-maintained security servers as of 2026-09-18.
release cadence: 2 releases in the last 90 days (latest 2026-09-14)
registry: io.github.wundervault/wundervault-mcp (active, first published 2026-06-12 · 5 versions)
packages: npm:@wundervault/mcp-server

06 · Wundervault MCP FAQ

Is Wundervault MCP still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-14 and it shipped 2 releases in the last 90 days. We re-verify nightly.

What can Wundervault MCP do?

How do I install Wundervault MCP?

Run `npx -y @wundervault/mcp-server`. The README documents 2 environment variables (WUNDERVAULT_AGENT_NAME, WUNDERVAULT_MOCK) to set first. Set WUNDERVAULT_AGENT_NAME, WUNDERVAULT_MOCK before connecting. You can also paste the ready-made client config above.

Does Wundervault MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Wundervault MCP

Alternatives to Wundervault MCP

Maintained security servers if Wundervault MCP isn't the fit.

Pairs well with

Servers that cover what Wundervault MCP doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · CIPP · HackTricks MCP Server · Kdbx · npm Registry MCP Server · Webcheck

More TypeScript MCP servers · X402 Seller - Rug Protection & Safe Alpha For Trading Agents · Action1 · Autotask · ConnectWise Manage · see all