Zero-knowledge MCP secrets vault for AI agents — use API keys, passwords & SSH keys with plaintext never entering the model context. The Wundervault MCP server.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add wundervault --env WUNDERVAULT_AGENT_NAME='<WUNDERVAULT_AGENT_NAME>' --env WUNDERVAULT_AGENT_TOKEN='<WUNDERVAULT_AGENT_TOKEN>' -- npx -y @wundervault/mcp-server~/.codex/config.toml
[mcp_servers.wundervault]
command = "npx"
args = ["-y", "@wundervault/mcp-server"]
env = { WUNDERVAULT_AGENT_NAME = "<WUNDERVAULT_AGENT_NAME>", WUNDERVAULT_AGENT_TOKEN = "<WUNDERVAULT_AGENT_TOKEN>" }
# codex mcp add wundervault --env WUNDERVAULT_AGENT_NAME='<WUNDERVAULT_AGENT_NAME>' --env WUNDERVAULT_AGENT_TOKEN='<WUNDERVAULT_AGENT_TOKEN>' -- npx -y @wundervault/mcp-server~/.cursor/mcp.json
{
"mcpServers": {
"wundervault": {
"command": "npx",
"args": [
"-y",
"@wundervault/mcp-server"
],
"env": {
"WUNDERVAULT_AGENT_NAME": "<WUNDERVAULT_AGENT_NAME>",
"WUNDERVAULT_AGENT_TOKEN": "<WUNDERVAULT_AGENT_TOKEN>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"wundervault": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@wundervault/mcp-server"
],
"env": {
"WUNDERVAULT_AGENT_NAME": "<WUNDERVAULT_AGENT_NAME>",
"WUNDERVAULT_AGENT_TOKEN": "<WUNDERVAULT_AGENT_TOKEN>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"wundervault": {
"command": "npx",
"args": [
"-y",
"@wundervault/mcp-server"
],
"env": {
"WUNDERVAULT_AGENT_NAME": "<WUNDERVAULT_AGENT_NAME>",
"WUNDERVAULT_AGENT_TOKEN": "<WUNDERVAULT_AGENT_TOKEN>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"wundervault": {
"command": "npx",
"args": [
"-y",
"@wundervault/mcp-server"
],
"env": {
"WUNDERVAULT_AGENT_NAME": "<WUNDERVAULT_AGENT_NAME>",
"WUNDERVAULT_AGENT_TOKEN": "<WUNDERVAULT_AGENT_TOKEN>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"wundervault": {
"command": "npx",
"args": [
"-y",
"@wundervault/mcp-server"
],
"env": {
"WUNDERVAULT_AGENT_NAME": "<WUNDERVAULT_AGENT_NAME>",
"WUNDERVAULT_AGENT_TOKEN": "<WUNDERVAULT_AGENT_TOKEN>"
}
}
}
}Environment variables
WUNDERVAULT_AGENT_NAMEWUNDERVAULT_AGENT_TOKEN
Replace the placeholders with your own credentials and keep them out of version control.