Bridges Claude to HashiCorp Vault through the Keymaster service for read-only secret retrieval at runtime. The server lets AI agents pull credentials and configuration values from Vault without baking secrets into prompts or configuration files. Useful when you're building autonomous workflows that need to authenticate against external services but shouldn't have secrets hardcoded anywhere in the chain. The read-only constraint keeps agents from accidentally rotating or deleting production secrets. If you're already running Vault and want Claude to handle tasks that require dynamic credential access, this gives you that connection without expanding the agent's write surface.
@akari-os/keymaster-mcp is the read-only Vault bridge for autonomous AI agents. Agents fetch credentials at runtime through a single MCP tool call — no API keys in .env files, config files, prompts, or shell history.
Full documentation: keymaster-mcp/README.md
@akari-os/keymaster-mcpIf this saves you from leaking another .env file at 3am, consider supporting the project.
USER_KEYMASTER_URL*Keymaster proxy URL
USER_KEYMASTER_TOKEN*secretBearer token for Keymaster authentication