MCP Secrets Vault — Development skill for Claude Code

[](https://github.com/RachidChabane/mcp-secrets-vault/actions/workflows/ci.yml) [](https://codecov.io/gh/RachidChabane/mcp-secrets-vault) [](https://www.npmjs.com/package/mcp-secrets-vault) [](https://opensource.org/licenses/MIT)

MCP Secrets Vault

A secure Model Context Protocol (MCP) server that enables AI assistants to use secrets (API keys, tokens) without ever exposing them. Built with TypeScript, featuring policy-based access control, rate limiting, and comprehensive audit logging.


[📺 View Full Demo Guide](./DEMO.md)

🔒 Security First

**Key Security Guarantee**: AI assistants can use your secrets to perform actions but will NEVER see the actual secret values.

• Secrets are stored only in environment variables
• All outputs are sanitized before returning to the AI
• Every action is logged for audit compliance
• Deny-by-default policy enforcement
• Rate limiting prevents abuse

🚀 Quick Start

Installation

Option 1: Global Installation

npm install -g mcp-secrets-vault
mcp-secrets-vault doctor  # Verify installation

Option 2: Direct Usage with npx (Recommended)

npx mcp-secrets-vault doctor  # Test without installing

Option 3: Local Installation in Project

npm install mcp-secrets-vault

MCP Client Configuration

For use with Claude Desktop or other MCP clients:

{
  "mcpServers": {
    "secrets-vault": {
      "command": "npx",
      "args": ["mcp-secrets-vault"],
      "env": {
        "VAULT_CONFIG": "./vault.config.json"
      }
    }
  }
}

Basic Setup

1. Set your environment variables:

export