@wundervault/mcp-server
MCP server for Wundervault zero-knowledge secret management. Exposes vault secrets to AI agents via the Model Context Protocol — secrets are decrypted server-side and never returned to the agent in plaintext.
Install
npm install -g @wundervault/mcp-serverQuick Start
{
"mcpServers": {
"wundervault": {
"command": "wundervault-mcp",
"env": {
"WUNDERVault_AGENT_VAULT_URL": "https://wundervault.com",
"WUNDERVault_AGENT_VAULT_API_KEY": "wv_agent_<AGENT_ID>|<KEY_SUFFIX>",
"WUNDERVault_AGENT_KEY": "<BASE64_ENCRYPTION_KEY>"
}
}
}
}Or using a credentials file:
wundervault-mcp --credentials ~/.wundervault/creds.jsonSecurity Model
- Zero-knowledge: The encryption key lives only in the MCP server process. The Wundervault server never sees it.
- Burn-after-reading: Plaintext secrets are never returned to the calling agent. After decryption, the agent receives only
"Secret retrieved and burned.". - Exec scrubbing: If you use the
execparameter, stdout/stderr are scrubbed of the plaintext before being returned. - Directive integrity: Server-side directive signatures (PBKDF2-HMAC-SHA256, 600k iterations) are verified before any secret is released.
- Timing-safe: HMAC comparison uses
crypto.timingSafeEqual.
