Download PDFMarkdown Version
ClaudeChatGPTPerplexityGeminiMicrosoft CopilotRaycastMeta AIGrokZ.aiQwenKimi
DeepSeekMistralCursorVS CodeWindsurfJetBrainsClineLovableVercel AI SDKLangChain

Use HashiCorp Vault with your AI.

Connect your account once and let the AI you already use work with it, without building another integration. Securely manage secrets, tokens, and encryption keys via HashiCorp Vault. read KV secrets, generate dynamic credentials, and monitor system health.

Included with plan

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

ChatGPTClaudeCursorPerplexityGeminiMicrosoft CopilotRaycastMeta AI

Complete set · 50 capabilities

The complete HashiCorp Vault capability set.

These are the exact actions your AI can choose when you ask it to work with HashiCorp Vault.

Capability set01 / 13

01-04

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 01

    Create aws role

    Create an AWS role

  2. 02

    Generate database creds

    Generate dynamic database credentials

  3. 03

    List audit devices

    List enabled audit devices

  4. 04

    List auth methods

    List enabled auth methods

Capability set02 / 13

05-08

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 05

    List kv secrets

    List secrets in a KV v2 engine path

  2. 06

    Create acl policy

    Create or update an ACL policy

  3. 07

    Create pki role

    Create a PKI role

  4. 08

    Create token

    Create a new Vault token

Capability set03 / 13

09-12

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 09

    Create transit key

    Create a new Transit key

  2. 10

    Decrypt transit

    Decrypt data using Transit engine

  3. 11

    Delete kv secret

    Delete the latest version of a KV v2 secret

  4. 12

    Enable auth method

    Enable a new auth method

Capability set04 / 13

13-16

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 13

    Enable engine

    Enable a new secrets engine

  2. 14

    Generate approle secret ID

    Generate a new Secret ID for an AppRole

  3. 15

    Get init status

    Check Vault initialization status

  4. 16

    Get openapi spec

    Generate OpenAPI V3 document of mounted backends

Capability set05 / 13

17-20

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 17

    Get system health

    Check Vault system health

  2. 18

    Initialize vault

    Initialize a new Vault cluster

  3. 19

    List mounts

    List mounted secrets engines

  4. 20

    List token accessors

    List token accessors (requires sudo)

Capability set06 / 13

21-24

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 21

    Lookup self token

    Lookup details about the current Vault token

  2. 22

    Revoke self token

    Revoke the current Vault token

  3. 23

    Rotate transit key

    Rotate a Transit key

  4. 24

    Write kv secret

    Create or update a secret in KV v2 engine

Capability set07 / 13

25-28

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 25

    Approle login

    Login using AppRole authentication

  2. 26

    Configure aws root

    Configure AWS root credentials

  3. 27

    Configure database

    Configure a database connection

  4. 28

    Configure kubernetes auth

    Configure Kubernetes authentication

Capability set08 / 13

29-32

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 29

    Create approle role

    Create or update an AppRole role

  2. 30

    Create database role

    Create a database role

  3. 31

    Create userpass user

    Create a new Userpass user

  4. 32

    Enable audit device

    Enable an audit device

Capability set09 / 13

33-36

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 33

    Encrypt transit

    Encrypt data using Transit engine

  2. 34

    Generate aws creds

    Generate dynamic AWS credentials

  3. 35

    Generate pki root

    Generate a new PKI root certificate

  4. 36

    Github login

    Login using GitHub personal access token

Capability set10 / 13

37-40

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 37

    Issue pki cert

    Issue a new PKI certificate

  2. 38

    Kubernetes login

    Login using Kubernetes authentication

  3. 39

    List acl policies

    List ACL policies

  4. 40

    Lookup lease

    Lookup a lease by ID

Capability set11 / 13

41-44

4 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 41

    Map github team

    Map a GitHub team to Vault policies

  2. 42

    Read kv metadata

    Read metadata for a KV v2 secret

  3. 43

    Read kv secret

    Read a secret from KV v2 engine

  4. 44

    Renew lease

    Renew a lease

Capability set12 / 13

45-47

3 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 45

    Renew self token

    Renew the current Vault token

  2. 46

    Revoke lease

    Revoke a lease

  3. 47

    Revoke pki cert

    Revoke a PKI certificate

Capability set13 / 13

48-50

3 capabilities in this set.

Part of 50 available through HashiCorp Vault.

  1. 48

    Seal vault

    Seal the Vault

  2. 49

    Unseal vault

    Unseal the Vault with a key share

  3. 50

    Userpass login

    Login using Username and Password

Observed, not estimated

1299ms average. Fast in production.

HashiCorp Vault is checked daily against the live service.

Daily averagePeak 1674ms
Aug 20Today
Fastest day
1045ms
Slowest day
1674ms
14-day trend
Stable-4%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 50 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of HashiCorp Vault, so you can see the experience inside your AI.

It does not authenticate your account with HashiCorp Vault. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

HashiCorp Vault Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_lgB4qaVCQ3JeVdH9vUAFUfoB5Ytd1cCr5alMptaW/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — HashiCorp Vault capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "hashicorp-vault-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_lgB4qaVCQ3JeVdH9vUAFUfoB5Ytd1cCr5alMptaW/mcp"
    }
  }
}
  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Step-by-step instructions for each client are in the guide. How to connect

FAQ

Questions HashiCorp Vault owners ask.

  • 01

    Can I check the remaining TTL and policies of my current session token?

    Yes. Use the lookup_self_token capability. It returns the creation time, TTL, associated policies, and metadata for the token currently in use.

  • 02

    How do I retrieve a specific secret from a KV version 2 engine?

    Use the read_kv_secret capability by providing the path to the secret. The agent will fetch the data and present the key-value pairs securely.

  • 03

    Is it possible to generate temporary database credentials through the agent?

    Yes. If the database engine is configured, use generate_database_creds with the specific role name to receive a temporary username and password.

Explore

More in Fort Knox

Suggestions