4,000+ servers built on vurb.ts
Vinkius

HashiCorp Vault MCP Server for Claude DesktopGive Claude Desktop instant access to 50 tools to Approle Login, Configure Aws Root, Configure Database, and more

MCP Inspector GDPR Free for Subscribers

Claude Desktop is Anthropic's native application for interacting with Claude AI models on macOS and Windows. It was the first consumer application to ship with built-in MCP support, making it the reference implementation for the Model Context Protocol standard.

Ask AI about this MCP Server for Claude Desktop

The HashiCorp Vault MCP Server for Claude Desktop is a standout in the Fort Knox category — giving your AI agent 50 tools to work with, ready to go from day one.

Built for AI Agents by Vinkius

Vinkius delivers Streamable HTTP and SSE to any MCP client

ClaudeClaude
ChatGPTChatGPT
CursorCursor
GeminiGemini
WindsurfWindsurf
VS CodeVS Code
JetBrainsJetBrains
VercelVercel
+ other MCP clients
Classic Setup·json
{
  "mcpServers": {
    "hashicorp-vault": {
      // Your Vinkius token. get it at cloud.vinkius.com
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}
RecommendedModern Approach — Zero Configuration

Vinkius Desktop App

The modern way to manage MCP Servers — no config files, no terminal commands. Install HashiCorp Vault and 4,000+ MCP Servers from a single visual interface.

Vinkius Desktop InterfaceVinkius Desktop InterfaceVinkius Desktop InterfaceVinkius Desktop Interface
Download Free Open SourceNo signup required
HashiCorp Vault
Fully ManagedVinkius Servers
60%Token savings
High SecurityEnterprise-grade
IAMAccess control
EU AI ActCompliant
DLPData protection
V8 IsolateSandboxed
Ed25519Audit chain
<40msKill switch
Stream every event to Splunk, Datadog, or your own webhook in real-time

* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure

About HashiCorp Vault MCP Server

Connect your HashiCorp Vault instance to any AI agent to automate secrets management and security operations through natural language.

Claude Desktop is the definitive way to connect HashiCorp Vault to your AI workflow. Add Vinkius Edge URL to your config, restart the app, and Claude immediately exposes all 50 tools in the chat interface. ask a question, Claude calls the right tool, and you see the answer. Zero code, zero context switching.

What you can do

  • Secrets Management — Read, write, and list KV secrets directly from your secure mounts using the KV engine.
  • Dynamic Credentials — Generate on-demand credentials for Databases, AWS, and PKI certificates without manual intervention.
  • Token Operations — Create, lookup, and renew tokens to manage session lifecycles and access control.
  • Transit Encryption — Encrypt and decrypt data using Vault's transit engine to protect sensitive information without exposing keys.
  • System Administration — Check cluster health, manage mounts, and configure auth methods or ACL policies directly.

The HashiCorp Vault MCP Server exposes 50 tools through the Vinkius. Connect it to Claude Desktop in under two minutes — credentials fully managed, no infrastructure to provision, no vendor lock-in. Your configuration, your data, your control.

All 50 HashiCorp Vault tools available for Claude Desktop

When Claude Desktop connects to HashiCorp Vault through Vinkius, your AI agent gets direct access to every tool listed below — spanning secrets-management, encryption, key-management, and more. Every call runs in a secure, isolated environment with full audit visibility. Beyond a simple connection, you get real-time monitoring of agent activity, enterprise governance, and optimized token usage.

approle

Approle login on HashiCorp Vault

Login using AppRole authentication

configure

Configure aws root on HashiCorp Vault

Configure AWS root credentials

configure

Configure database on HashiCorp Vault

Configure a database connection

configure

Configure kubernetes auth on HashiCorp Vault

Configure Kubernetes authentication

create

Create acl policy on HashiCorp Vault

Create or update an ACL policy

create

Create approle role on HashiCorp Vault

Create or update an AppRole role

create

Create aws role on HashiCorp Vault

Create an AWS role

create

Create database role on HashiCorp Vault

Create a database role

create

Create pki role on HashiCorp Vault

Create a PKI role

create

Create token on HashiCorp Vault

Create a new Vault token

create

Create transit key on HashiCorp Vault

Create a new Transit key

create

Create userpass user on HashiCorp Vault

Create a new Userpass user

decrypt

Decrypt transit on HashiCorp Vault

Decrypt data using Transit engine

delete

Delete kv secret on HashiCorp Vault

Delete the latest version of a KV v2 secret

enable

Enable audit device on HashiCorp Vault

Enable an audit device

enable

Enable auth method on HashiCorp Vault

Enable a new auth method

enable

Enable engine on HashiCorp Vault

Enable a new secrets engine

encrypt

Encrypt transit on HashiCorp Vault

Encrypt data using Transit engine

generate

Generate approle secret id on HashiCorp Vault

Generate a new Secret ID for an AppRole

generate

Generate aws creds on HashiCorp Vault

Generate dynamic AWS credentials

generate

Generate database creds on HashiCorp Vault

Generate dynamic database credentials

generate

Generate pki root on HashiCorp Vault

Generate a new PKI root certificate

get

Get init status on HashiCorp Vault

Check Vault initialization status

get

Get openapi spec on HashiCorp Vault

Generate OpenAPI V3 document of mounted backends

get

Get system health on HashiCorp Vault

Check Vault system health

github

Github login on HashiCorp Vault

Login using GitHub personal access token

initialize

Initialize vault on HashiCorp Vault

Initialize a new Vault cluster

issue

Issue pki cert on HashiCorp Vault

Issue a new PKI certificate

kubernetes

Kubernetes login on HashiCorp Vault

Login using Kubernetes authentication

list

List acl policies on HashiCorp Vault

List ACL policies

list

List audit devices on HashiCorp Vault

List enabled audit devices

list

List auth methods on HashiCorp Vault

List enabled auth methods

list

List kv secrets on HashiCorp Vault

List secrets in a KV v2 engine path

list

List mounts on HashiCorp Vault

List mounted secrets engines

list

List token accessors on HashiCorp Vault

List token accessors (requires sudo)

lookup

Lookup lease on HashiCorp Vault

Lookup a lease by ID

lookup

Lookup self token on HashiCorp Vault

Lookup details about the current Vault token

map

Map github team on HashiCorp Vault

Map a GitHub team to Vault policies

read

Read kv metadata on HashiCorp Vault

Read metadata for a KV v2 secret

read

Read kv secret on HashiCorp Vault

Read a secret from KV v2 engine

renew

Renew lease on HashiCorp Vault

Renew a lease

renew

Renew self token on HashiCorp Vault

Renew the current Vault token

revoke

Revoke lease on HashiCorp Vault

Revoke a lease

revoke

Revoke pki cert on HashiCorp Vault

Revoke a PKI certificate

revoke

Revoke self token on HashiCorp Vault

Revoke the current Vault token

rotate

Rotate transit key on HashiCorp Vault

Rotate a Transit key

seal

Seal vault on HashiCorp Vault

Seal the Vault

unseal

Unseal vault on HashiCorp Vault

Unseal the Vault with a key share

userpass

Userpass login on HashiCorp Vault

Login using Username and Password

write

Write kv secret on HashiCorp Vault

Create or update a secret in KV v2 engine

Connect HashiCorp Vault to Claude Desktop via MCP

Follow these steps to wire HashiCorp Vault into Claude Desktop. The entire setup takes under two minutes — your credentials stay safe behind Vinkius.

01

Open Claude Desktop Settings

Go to Settings → Developer → Edit Config to open claude_desktop_config.json
02

Add the MCP Server

Paste the configuration above into the mcpServers section
03

Restart Claude Desktop

Close and reopen Claude Desktop to load the new server
04

Start using HashiCorp Vault

Look for the 🔌 icon in the chat. your 50 tools are now available

Why Use Claude Desktop with the HashiCorp Vault MCP Server

Claude Desktop by Anthropic provides unique advantages when paired with HashiCorp Vault through the Model Context Protocol.

01

Claude Desktop is the reference MCP client. it was designed alongside the protocol itself, ensuring the most complete and stable MCP implementation available

02

Zero-code configuration: add a server URL to a JSON file and Claude instantly discovers and exposes all available tools in the chat interface

03

Claude's extended thinking capability lets it reason through multi-step tool usage, chaining multiple API calls to answer complex questions

04

Enterprise-grade security with local config storage. your tokens never leave your machine, and connections go directly to Vinkius Edge network

HashiCorp Vault + Claude Desktop Use Cases

Practical scenarios where Claude Desktop combined with the HashiCorp Vault MCP Server delivers measurable value.

01

Interactive data exploration: ask Claude to query DNS records, look up WHOIS data, and cross-reference results in a single conversation

02

Ad-hoc security audits: type a domain name and let Claude enumerate subdomains, check DNS history, and flag configuration anomalies. all through natural language

03

Executive briefings: generate comprehensive domain intelligence reports by asking Claude to compile findings into a formatted summary

04

Learning and training: new team members can explore API capabilities conversationally without needing to read documentation

Example Prompts for HashiCorp Vault in Claude Desktop

Ready-to-use prompts you can give your Claude Desktop agent to start working with HashiCorp Vault immediately.

01

"Check the health and initialization status of my Vault server."

02

"Read the secret stored at 'secret/data/production/api-keys'."

03

"Renew my current Vault token for another hour."

Troubleshooting HashiCorp Vault MCP Server with Claude Desktop

Common issues when connecting HashiCorp Vault to Claude Desktop through Vinkius, and how to resolve them.

01

Server not appearing after restart

Ensure the JSON is valid (no trailing commas). Check the file path: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\\Claude\\ (Windows).
02

Authentication error

Verify your Vinkius token is correct. Go to cloud.vinkius.com to regenerate it if needed.
03

Tools not showing in chat

Click the 🔌 icon at the bottom of the chat input. If it shows 0 tools, the server may still be connecting. wait a few seconds.

HashiCorp Vault + Claude Desktop FAQ

Common questions about integrating HashiCorp Vault MCP Server with Claude Desktop.

01

How does Claude Desktop discover MCP tools?

When Claude Desktop starts, it reads the claude_desktop_config.json file and connects to each configured MCP server. It calls the tools/list endpoint to fetch the schema for every available tool, then surfaces them as clickable options in the chat interface via the 🔌 icon.
02

What happens if the MCP server is temporarily unavailable?

Claude Desktop handles disconnections gracefully. if the server is unreachable at startup, the tools simply won't appear. Once the server becomes available again, restarting Claude Desktop will re-establish the connection. There is no timeout penalty or error loop.
03

Can I connect multiple MCP servers simultaneously?

Yes. You can add as many servers as you need in the mcpServers section of the config file. Each server appears as a separate tool provider, and Claude can use tools from multiple servers in a single conversation turn.
04

Is there a limit on the number of tools per server?

Claude Desktop can handle hundreds of tools per server. However, for optimal LLM performance, Vinkius servers are designed to expose focused, well-documented tool sets rather than overwhelming the model with too many options.
05

Does Claude Desktop support Streamable HTTP transport?

Yes. Claude Desktop supports both SSE (Server-Sent Events) and the newer Streamable HTTP transport that Vinkius uses. Simply provide the server URL. Claude auto-negotiates the transport protocol.

Explore More MCP Servers

View all →