1Claw Vault MCP Server - install, status & alternatives [2026]

01 · Install 1Claw Vault

before you install - you'll need

Set ONECLAW_LOCAL_ONLY, ONECLAW_LOCAL_VAULT before connecting. ONECLAW_AGENT_API_KEY is optional or environment-specific per the README.

Claude Code

claude mcp add 1clawai-1claw-mcp -- npx -y @1claw/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "1clawai-1claw-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@1claw/mcp"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package @1claw/mcp - the @1claw scope differs from the repo owner (1clawai); confirm it's the project's official package

registry namespace io.github.1clawAI is GitHub-verified and matches the repo owner

03 · What 1Claw Vault can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can list all secrets (metadata only - never values), fetch the decrypted value of a secret by path. Accepts optional client_share for MPC vaults, create or update a secret (creates a new version). Response includes client_share when the vault has MPC enabled, and get metadata without fetching the value.

Capability map

Tools grouped from the project's README - what 1Claw Vault lets an agent do.

read & search

8 tools - e.g. List all secrets (metadata only - never values); List all versions of a secret (version numbers, dates, disabled status); Fetch an env_bundle secret and parse it as KEY=VALUE JSON

list_secrets · list_versions · get_env_bundle · list_vaults · list_transactions · get_transaction…

Secret

6 tools - e.g. Fetch the decrypted value of a secret by path. Accepts optional client_share for MPC vaults.; Create or update a secret (creates a new version). Response includes client_share when the vault has MPC…

get_secret · put_secret · delete_secret · describe_secret · share_secret · platform_rotate_webhook_secret

Platform

6 tools - e.g. List all platform apps in the caller's org.; Register a new platform app (returns plt_ API key). User-only.; Bootstrap resources (vault, agent, policies) for a connected user from a template.

platform_list_apps · platform_create_app · platform_bootstrap_user · platform_reissue_claim · platform_marketplace · platform_app_stats

Sign

5 tools - e.g. Sign-only (no broadcast). EVM returns signed_tx hex; non-EVM returns chain-specific signed payload. Supports xrpl_tx_json for arbitrary XRPL transactions.; Sign a message using EIP-191 personal_sign.…

sign_transaction · sign_message · sign_typed_data · sign_digest · treasury_sign_proposal

Rotate

3 tools - e.g. Store a new value for an existing secret and return the version; Server-side secret rotation with generated value (length, charset configurable); Rotate the API key for a platform app. Returns the new…

rotate_and_store · rotate_generate · platform_rotate_key

Simulate

2 tools - e.g. Simulate a transaction via Tenderly without signing or broadcasting; Simulate an ordered sequence of transactions (Tenderly bundle) without signing

simulate_transaction · simulate_bundle

Oauth

2 tools - e.g. Revoke an OAuth access or refresh token issued by 1Claw (RFC 7009).; Revoke OAuth consent previously granted to a platform app, invalidating all its tokens.

oauth_revoke_token · oauth_revoke_consent

Treasury

2 tools - e.g. Create a treasury multisig proposal (transaction intent for Safe signers to approve).; List proposals for a treasury, optionally filtered by status (pending, approved, executed, rejected, expired).

treasury_propose · treasury_list_proposals

04 · Who maintains 1Claw Vault

1Claw Vault is maintained by 1clawai. It's the only MCP server we track from this author; the repo dates to Feb 2026.

05 · Facts

repository: github.com/1clawai/1claw-mcp
website: https://1claw.xyz/
category: security - ranked #20 of 182 actively-maintained security servers as of 2026-08-25.
registry: io.github.1clawAI/1claw-mcp (active, first published 2026-06-03 · 18 versions)
packages: npm:@1claw/mcp

06 · 1Claw Vault FAQ

Is 1Claw Vault still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-24. We re-verify nightly.

What can 1Claw Vault do?

With this server connected, an agent can list all secrets (metadata only - never values), fetch the decrypted value of a secret by path. Accepts optional client_share for MPC vaults, create or update a secret (creates a new version). Response includes client_share when the vault has MPC enabled, and get metadata without fetching the value.

How do I install 1Claw Vault?

Run `npx -y @1claw/mcp`. The README documents 3 environment variables (ONECLAW_AGENT_API_KEY, ONECLAW_LOCAL_ONLY, ONECLAW_LOCAL_VAULT) to set first. Set ONECLAW_LOCAL_ONLY, ONECLAW_LOCAL_VAULT before connecting. ONECLAW_AGENT_API_KEY is optional or environment-specific per the README. You can also paste the ready-made client config above.

Does 1Claw Vault run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to 1Claw Vault

Alternatives to 1Claw Vault

Maintained security servers if 1Claw Vault isn't the fit.

Pairs well with

Servers that cover what 1Claw Vault doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Cybersec Toolkit · Change This File · Keyblind · Codemore · Pkgxray

More TypeScript MCP servers · Agents Party · 1lystore MCP Server · 2s Io MCP Server · JobGPT - Job Search Automation & Auto Apply · Touchdesigner MCP Server · see all