Vault MCP

chill-ai-space/vault-mcp

Built for scenarios where you need an LLM agent to authenticate or call APIs without exposing secrets in its context window. Offers three main patterns: vault_add opens a localhost form where you enter credentials that get AES-256-GCM encrypted to disk, vault_login decrypts and autofills them via Chrome DevTools Protocol, and vault_api_request proxies HTTP calls by injecting API keys into headers server-side. The agent only sees success/failure responses, never the actual passwords or tokens. Useful when building autonomous workflows that touch authenticated services like Jira, Stripe, or GitHub without leaking credentials into conversation history or session logs.

GitHub stars: 1
tools: 3
transport: STDIO
last updated: Mar 1, 2026

View on GitHub

Tools

3 tools

Public tool metadata for what this MCP can expose to an agent.

zerocreds_ensure_serverEnsures the ZeroCreds MCP server is running. If it is not already running, this tool starts it in the background and waits for it to become ready.

Ensures the ZeroCreds MCP server is running. If it is not already running, this tool starts it in the background and waits for it to become ready.

No parameter schema in public metadata yet.

zerocreds_create_sessionCreates a one-time form session. Returns { token, url, expires_at }.

Creates a one-time form session. Returns { token, url, expires_at }.

No parameter schema in public metadata yet.

zerocreds_check_statusPolls session status. Returns { status: "pending" | "done" | "expired" }.

Polls session status. Returns { status: "pending" | "done" | "expired" }.

No parameter schema in public metadata yet.

Readme

zerocreds-mcp

MCP server for ZeroCreds — collect credentials from users without exposing them to the LLM.

How it works

Claude                    ZeroCreds Server            User
  │                            │                        │
  ├─zerocreds_create_session──►│                        │
  │◄─{ token, url }────────────┤                        │
  │                            │                        │
  │  "Please fill: <url>"──────────────────────────────►│
  │                            │◄──── form submit ───────┤
  │                            │  (credentials saved)    │
  │                            │                        │
  ├─zerocreds_check_status─────►│                        │
  │◄─{ status: "done" }────────┤                        │
  │                            │                        │
  │  (proceeds — never saw the credentials)

Setup

npm install -g zerocreds-mcp

Add to ~/.claude/mcp.json (Claude Code) or Claude Desktop config:

View the full README on GitHub

Details

Repository: github.com/chill-ai-space/vault-mcp
Package: chillai-vault-mcp
Transport: STDIO
Registry: MCP registry, active