{"name":"io.github.DinanathDash/envault","slug":"dinanathdash-envault","title":null,"description":"Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.","url":"https://mcp.market/server/dinanathdash-envault","rating":null,"grade":"C","score":68,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":30,"stars":4,"forks":2,"downloads_week":46,"last_push_at":"2026-09-02T06:05:33.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/DinanathDash/Envault","website":null,"version":"1.12.0","remotes":[],"packages":[{"registryType":"npm","identifier":"@dinanathdash/envault-mcp-server","version":"1.12.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"Required: Generate via Envault Account Settings -> Security -> MCP Token","isRequired":true,"format":"string","isSecret":true,"name":"ENVAULT_TOKEN"},{"description":"Required: https://www.envault.tech","isRequired":true,"format":"string","name":"ENVAULT_BASE_URL"}]}],"tools":[{"name":"envault_approve","description":"Approve a pending HITL request by approval ID. Use after envault_push/envault_deploy returns a pending approval. This executes the human approval action.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_audit","description":"Audit local env safety and key parity. Can install pre-commit hook and emit text or JSON output.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_context","description":"Alias of envault_status for explicit context retrieval. Returns auth, project, role, permissions, active environment, and local env mapping.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_deploy","description":"Alias of envault_push. Same HITL behavior applies: if pending approval is returned, provide approval_url to the user and wait for approval completion before claiming success.","write_action":true,"price_micros":0,"input_schema":null},{"name":"envault_diff","description":"Compare local env file against remote secrets and return additions, deletions, and modifications before proposing a push.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_doctor","description":"Run local diagnostics for CLI installation, Homebrew source, and version parity.","write_action":true,"price_micros":0,"input_schema":null},{"name":"envault_env_default","description":"Set the default environment in envault.json.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_env_map","description":"Map an environment slug to a local env file path in envault.json.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_env_unmap","description":"Remove an environment-to-file mapping from envault.json.","write_action":true,"price_micros":0,"input_schema":null},{"name":"envault_generate_hooks","description":"Create or update git post-merge hook that triggers envault pull after merges.","write_action":true,"price_micros":0,"input_schema":null},{"name":"envault_init","description":"Initialize envault.json and project linkage in the current directory. Use for first-time project setup.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_login","description":"Start CLI device-flow login in the browser and store local CLI access token. Use when auth is missing or expired.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_mcp_install","description":"Install MCP integration config for local workspace and/or global editor clients.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_mcp_update","description":"Update MCP package/config for local workspace and/or global editor clients.","write_action":true,"price_micros":0,"input_schema":null},{"name":"envault_pull","description":"Fetch remote secrets into a local env file. Use before local development runs, diffs, or edits. This updates local files only and does not require HITL approval.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_push","description":"Submit local secret changes for HITL approval. IMPORTANT: treat this as an approval-request step, not immediate execution. If the response indicates pending approval (for example HTTP 202 Accepted with approval_id/approval_url), you must explicitly show the approval_url to the user, instruct them to open it in a browser and approve/reject, then wait for user confirmation or poll status before assu","write_action":true,"price_micros":0,"input_schema":null},{"name":"envault_remove_local_key","description":"Remove a key from local env file. If autoPush=true, this triggers envault_push and may return pending HITL approval requiring browser approval.","write_action":true,"price_micros":0,"input_schema":null},{"name":"envault_run","description":"Run a local command with Envault secrets injected into process environment. Use when the user asks to run an app/script with managed secrets.","write_action":true,"price_micros":0,"input_schema":null},{"name":"envault_sdk_install","description":"Install Envault TypeScript SDK either in current project, globally, or both.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_sdk_update","description":"Update Envault TypeScript SDK either in current project, globally, or both.","write_action":true,"price_micros":0,"input_schema":null},{"name":"envault_set_local_key","description":"Set/update a key=value in local env file. If autoPush=true, this triggers envault_push and may return pending HITL approval requiring browser approval.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_status","description":"Read-only context check for auth, project, role, permissions, active environment, and mapped local env file. Use this first when context is unclear.","write_action":false,"price_micros":0,"input_schema":null},{"name":"envault_version","description":"Print installed Envault CLI version.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":68,"grade":"C","scanned_at":"2026-09-27T22:32:23.516Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T22:32:23.491Z","components":{"code":{"score":15,"max":25,"notes":["3 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 26 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present"},{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present","evidence":"package.json: … \"prepublishOnly\": \"npm run check\", \"postinstall\": \"node postinstall.mjs\" }, \"publishC…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@dinanathdash/envault-mcp-server","version":"1.12.0","found":true,"license":"SEE LICENSE IN LICENSE","hasInstallScripts":true,"dependencyCount":1,"publishedAt":"2026-04-21T21:11:12.690Z","repositoryUrl":"git+https://github.com/DinanathDash/Envault.git","weeklyDownloads":46}],"repo":{"found":true,"owner":"DinanathDash","repo":"Envault","archived":false,"pushedAt":"2026-09-02T06:05:33Z","stars":4,"forks":2,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/108653031?v=4","ownerCreatedAt":"2022-07-04T06:34:00Z","license":"NOASSERTION"},"icon":{"url":"https://avatars.githubusercontent.com/u/108653031?v=4&s=128","source":"github"},"presence":{"stars":4,"forks":2,"downloadsWeek":46,"license":"NOASSERTION","lastPushAt":"2026-09-02T06:05:33.000Z","score":30}}}},"grade_history":[],"reviews":[]}