{"name":"io.github.Chill-AI-Space/vault","slug":"chill-ai-space-vault","title":"Vault MCP","description":"MCP server for credential isolation — bots use passwords and API keys without seeing them","url":"https://mcp.market/server/chill-ai-space-vault","rating":null,"grade":"B","score":72,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":27,"stars":2,"forks":0,"downloads_week":35,"last_push_at":"2026-09-05T23:39:50.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/Chill-AI-Space/vault-mcp","website":null,"version":"0.2.1","remotes":[],"packages":[{"registryType":"npm","identifier":"chillai-vault-mcp","version":"0.2.1","transport":{"type":"stdio"}}],"tools":[{"name":"vault_add","description":"Securely add a new credential to the vault. Opens a browser form where the user enters their password directly — the password NEVER passes through the AI agent. Supports templates for popular services (github, jira, stripe, etc.).","write_action":false,"price_micros":0,"input_schema":null},{"name":"vault_api_request","description":"Make an API request with stored credentials. The API key is injected automatically — the bot never sees it. Supports header, query param, and basic auth patterns.","write_action":false,"price_micros":0,"input_schema":null},{"name":"vault_check","description":"Verify a credential is valid and ready to use. Checks existence, active status, required fields, and expiration.","write_action":false,"price_micros":0,"input_schema":null},{"name":"vault_import","description":"Import API keys from a .env file. Each key is stored as an encrypted api_key credential. The .env values pass through memory only — never returned to the agent.","write_action":false,"price_micros":0,"input_schema":null},{"name":"vault_list","description":"List all available credentials in the vault. Returns only site IDs and types — no secrets.","write_action":false,"price_micros":0,"input_schema":null},{"name":"vault_login","description":"Log into a website using stored credentials. The bot never sees the password — Vault fills the login form via Chrome DevTools Protocol. Supports TOTP 2FA if configured.","write_action":false,"price_micros":0,"input_schema":null},{"name":"vault_remove","description":"Remove a credential from the vault permanently.","write_action":true,"price_micros":0,"input_schema":null},{"name":"vault_status","description":"Check the status of a specific credential: active/inactive, last used, audit count.","write_action":false,"price_micros":0,"input_schema":null},{"name":"vault_templates","description":"List available credential templates for popular services. Templates auto-fill login URLs and CSS selectors.","write_action":false,"price_micros":0,"input_schema":null},{"name":"vault_update","description":"Update an existing credential. Opens a browser form to enter new password/API key — the secret NEVER passes through the AI agent.","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":72,"grade":"B","scanned_at":"2026-09-28T06:08:42.118Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-09-28T06:08:42.090Z","components":{"code":{"score":13,"max":25,"notes":["45 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 22 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/tools/vault-add.js: …'win32' ? 'start' : 'xdg-open'; exec(`${openCmd} \"${url}\"`); } // Wait for the user …"}],"inputs":{"packages":[{"registryType":"npm","identifier":"chillai-vault-mcp","version":"0.2.1","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":6,"publishedAt":"2026-03-01T18:06:09.980Z","repositoryUrl":"git+https://github.com/chillai-space/vault-mcp.git","weeklyDownloads":35}],"repo":{"found":true,"owner":"Chill-AI-Space","repo":"vault-mcp","archived":false,"pushedAt":"2026-09-05T23:39:50Z","stars":2,"forks":0,"openIssues":7,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/267858405?v=4","ownerCreatedAt":"2026-02-21T15:26:28Z"},"icon":{"url":null,"source":"none"},"presence":{"stars":2,"forks":0,"downloadsWeek":35,"license":"MIT","lastPushAt":"2026-09-05T23:39:50.000Z","score":27}}}},"grade_history":[],"reviews":[]}