mcpField
V
Vault MCP

Vault MCP

Local
github.com/Chill-AI-SpaceSecurity2Updated 8w ago
Repository

About Vault MCP

Vault MCP is an MCP server for collecting credentials through user-submitted forms without exposing them to an LLM. It is intended for agents that need secrets while keeping credential entry separate from the conversation.

Key features

  1. 01Creates one-time credential form sessions
  2. 02Supports multiple field types and privacy levels
  3. 03Checks pending, completed, or expired status
  4. 04Routes submissions to a named destination

Use cases

  1. 01Collect a password during an account connection flow
  2. 02Request an API key without showing it to an LLM
  3. 03Check whether a user has submitted a credential form

MCP support

It exposes tools to create credential collection sessions and check their status. MCP clients can present the returned form URL to the user and poll for completion.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "chill-ai-space-vault": {
      "command": "npx",
      "args": [
        "-y",
        "chillai-vault-mcp"
      ]
    }
  }
}
Run commandnpx -y chillai-vault-mcp

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npmchillai-vault-mcp0.2.1

Tools

10

Saved tool list · updated 2w ago

ParameterTypeRequiredDescription
site_idstringYesThe site identifier (e.g. "github", "jira")
timeout_msnumberNoLogin timeout in milliseconds (default: 15000)
totp_selectorstringNoCSS selector for TOTP/2FA input field

Details

From the project README

zerocreds-mcp

MCP server for ZeroCreds — collect credentials from users without exposing them to the LLM.

How it works

Claude                    ZeroCreds Server            User
  │                            │                        │
  ├─zerocreds_create_session──►│                        │
  │◄─{ token, url }────────────┤                        │
  │                            │                        │
  │  "Please fill: <url>"──────────────────────────────►│
  │                            │◄──── form submit ───────┤
  │                            │  (credentials saved)    │
  │                            │                        │
  ├─zerocreds_check_status─────►│                        │
  │◄─{ status: "done" }────────┤                        │
  │                            │                        │
  │  (proceeds — never saw the credentials)

Setup

npm install -g zerocreds-mcp

Add to ~/.claude/mcp.json (Claude Code) or Claude Desktop config:

{
  "mcpServers": {
    "zerocreds": {
      "command": "zerocreds-mcp",
      "env": {
        "ZEROCREDS_URL": "https://zerocreds.ru",
        "ZEROCREDS_TOKEN": "your-admin-or-integrator-token",
        "ZEROCREDS_DEFAULT_DESTINATION": "local-dev",
        "ZEROCREDS_TG_BOT_TOKEN": "optional — sends link via Telegram",
        "ZEROCREDS_TG_CHAT_ID": "optional"
      }
    }
  }
}

Environment variables

VariableRequiredDescription
ZEROCREDS_URLnoServer URL (default: https://zerocreds.ru)
ZEROCREDS_TOKENyesAdmin or integrator token
ZEROCREDS_DEFAULT_DESTINATIONnoDefault destination name (default: local-dev)
ZEROCREDS_TG_BOT_TOKENnoTelegram bot token — auto-sends the link
ZEROCREDS_TG_CHAT_IDnoTelegram chat ID

Tools

zerocreds_create_session

Creates a one-time form session. Returns { token, url, expires_at }.

Claude shows url to the user, then polls zerocreds_check_status every 5–10 seconds.

Parameters:

  • title (required) — form heading
  • fields (required) — array of { name, label, type?, placeholder?, required?, level? }
  • description — optional subtext
  • destination — named destination from server config; overrides env default
  • ttl_minutes — link expiry (default: 30)

Field types: text, password, email, tel, number, textarea, url

Field levels (optional, shown to user as privacy indicator): secret · pii · attribute · credential

zerocreds_check_status

Polls session status. Returns { status: "pending" | "done" | "expired" }.

Example agent flow

User: "Log me into GitHub"

Claude: [zerocreds_create_session]
  title: "Connect GitHub"
  fields: [
    { name: "token", label: "Personal Access Token", type: "password" }
  ]
→ { token: "abc123", url: "https://zerocreds.ru/f/abc123" }

Claude: "Please fill in your token here: https://zerocreds.ru/f/abc123"

[polls zerocreds_check_status every 5s]
→ { status: "done" }

Claude: "GitHub connected! Proceeding..."
[reads token from secret store via configured destination]

Self-hosting

See zerocreds-server to run your own instance.

License

MIT

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.