Wundervault MCP

A zero-knowledge secrets vault for AI agents. Every API key you paste into an agent chat or a .env file ends up in context windows, transcripts, and provider logs. Wundervault's answer: the agent never receives the secret at all. It asks for work - "run this deploy with the key injected" - and a local daemon decrypts the secret, injects it into the subprocess environment, zeroes the buffer, and scrubs the output…. Its 6 documented tools cover vault, entry.

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-07-19 · ★ 2 · #87 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

AGPL-3.0 · TypeScript servers · how we verify → /methodology

01 · Install Wundervault MCP

before you install - you'll need

WUNDERVAULT_MOCK

Environment variables documented in the project's README - it lists which are required and which have defaults.

Claude Code

claude mcp add wundervault-wundervault-mcp -- npx -y @wundervault/mcp-server

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "wundervault-wundervault-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@wundervault/mcp-server"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license AGPL-3.0 - declared in the repository

npm package @wundervault/mcp-server - published under the repo owner's npm scope (@wundervault)

registry namespace io.github.wundervault is GitHub-verified and matches the repo owner

03 · What Wundervault MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can list all vault entries available to this agent. Returns entry IDs and secret names - no values, and retrieve and decrypt a vault secret. Optionally execute a command with it.

The 6 tools it gives your agent

Extracted from the project's README - what wundervault-mcp lets an agent do.

vault_entries_list: - List all vault entries available to this agent. Returns entry IDs and secret names - no values.
vault_entry_get: - Retrieve and decrypt a vault secret. Optionally execute a command with it.
vault_exec: - Execute a shell command with a vault secret injected as an env var - locally or on a remote host over SSH. The secret is injected into the subprocess and the bu
vault_entry_inject_env: - Write a vault secret directly into a config file (~/.npmrc, ~/.netrc, ~/.docker/config.json, or a project .env) without the plaintext passing through the agent.
vault_rsync: - Sync a local directory to a remote host using rsync over SSH, with the SSH key fetched from the vault (temp keyfile deleted immediately after transfer).
vault_entry_forget: - Discard a local reference. No-op on the server.

Latest releases

v1.6.8 · 2026-06-15

Adds WUNDERVAULT_MOCK demo mode (off by default) so directory scanners / CI (Glama) can build and introspect all 6 tools without the local wundervault-agent daemon or credentials. Production behavior unchanged. This…

v1.6.7 · 2026-06-15

wundervault MCP server v1.6.7. · Secrets access and vault_exec for AI agents, with credentials delivered at runtime by the local wundervault-agent daemon (the server starts and answers introspection with zero env…

04 · Who maintains Wundervault MCP

wundervault-mcp is maintained by wundervault. It's the only MCP server we track from this author; the repo dates to Jun 2026.

05 · Facts

repository: github.com/wundervault/wundervault-mcp
website: https://wundervault.com/
category: security - ranked #87 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 2 releases in the last 90 days (latest 2026-06-15)
registry: io.github.wundervault/wundervault-mcp (active, first published 2026-06-12 · 3 versions)
packages: npm:@wundervault/mcp-server

06 · Wundervault MCP FAQ

Is Wundervault MCP still maintained?

Yes - as of 2026-08-25, its last commit was 2026-07-19 and it shipped 2 releases in the last 90 days. We re-verify nightly.

What can Wundervault MCP do?

How do I install Wundervault MCP?

Run `npx -y @wundervault/mcp-server`. The README documents one environment variable (WUNDERVAULT_MOCK) to set first. You can also paste the ready-made client config above.

Does Wundervault MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Wundervault MCP

Alternatives to Wundervault MCP

Maintained security servers if Wundervault MCP isn't the fit.

Pairs well with

Servers that cover what Wundervault MCP doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · CIPP · HackTricks MCP Server · Kdbx · Webcheck · Pyobfus MCP

More TypeScript MCP servers · X402 Seller - Rug Protection & Safe Alpha For Trading Agents · Action1 · Autotask · ConnectWise Manage · see all