Read-only runtime secret retrieval from HashiCorp Vault via Keymaster for autonomous AI agents.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add keymaster --env USER_KEYMASTER_URL='<USER_KEYMASTER_URL>' --env USER_KEYMASTER_TOKEN='<USER_KEYMASTER_TOKEN>' -- npx -y @akari-os/keymaster-mcp~/.codex/config.toml
[mcp_servers.keymaster]
command = "npx"
args = ["-y", "@akari-os/keymaster-mcp"]
env = { USER_KEYMASTER_URL = "<USER_KEYMASTER_URL>", USER_KEYMASTER_TOKEN = "<USER_KEYMASTER_TOKEN>" }
# codex mcp add keymaster --env USER_KEYMASTER_URL='<USER_KEYMASTER_URL>' --env USER_KEYMASTER_TOKEN='<USER_KEYMASTER_TOKEN>' -- npx -y @akari-os/keymaster-mcp~/.cursor/mcp.json
{
"mcpServers": {
"keymaster": {
"command": "npx",
"args": [
"-y",
"@akari-os/keymaster-mcp"
],
"env": {
"USER_KEYMASTER_URL": "<USER_KEYMASTER_URL>",
"USER_KEYMASTER_TOKEN": "<USER_KEYMASTER_TOKEN>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"keymaster": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@akari-os/keymaster-mcp"
],
"env": {
"USER_KEYMASTER_URL": "<USER_KEYMASTER_URL>",
"USER_KEYMASTER_TOKEN": "<USER_KEYMASTER_TOKEN>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"keymaster": {
"command": "npx",
"args": [
"-y",
"@akari-os/keymaster-mcp"
],
"env": {
"USER_KEYMASTER_URL": "<USER_KEYMASTER_URL>",
"USER_KEYMASTER_TOKEN": "<USER_KEYMASTER_TOKEN>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"keymaster": {
"command": "npx",
"args": [
"-y",
"@akari-os/keymaster-mcp"
],
"env": {
"USER_KEYMASTER_URL": "<USER_KEYMASTER_URL>",
"USER_KEYMASTER_TOKEN": "<USER_KEYMASTER_TOKEN>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"keymaster": {
"command": "npx",
"args": [
"-y",
"@akari-os/keymaster-mcp"
],
"env": {
"USER_KEYMASTER_URL": "<USER_KEYMASTER_URL>",
"USER_KEYMASTER_TOKEN": "<USER_KEYMASTER_TOKEN>"
}
}
}
}Environment variables
USER_KEYMASTER_URLUSER_KEYMASTER_TOKEN
Replace the placeholders with your own credentials and keep them out of version control.