MCP.Market

Envault MCP server

by DinanathDash·io.github.DinanathDash/envault·v1.12.0·4 stars
No reviews yet

Secure secret management with a Human-In-The-Loop (HITL) interceptor for agent mutations.

C68/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C68/100

full report

Adoption
Growing

4 stars46 downloads/wk

Reviews

Write one

Nobody has reviewed Envault yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Envault tools (23, 9 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • envault_approve

    Approve a pending HITL request by approval ID. Use after envault_push/envault_deploy returns a pending approval. This executes the human approval action.

  • envault_audit

    Audit local env safety and key parity. Can install pre-commit hook and emit text or JSON output.

  • envault_context

    Alias of envault_status for explicit context retrieval. Returns auth, project, role, permissions, active environment, and local env mapping.

  • envault_deploywrite action

    Alias of envault_push. Same HITL behavior applies: if pending approval is returned, provide approval_url to the user and wait for approval completion before claiming success.

  • envault_diff

    Compare local env file against remote secrets and return additions, deletions, and modifications before proposing a push.

  • envault_doctorwrite action

    Run local diagnostics for CLI installation, Homebrew source, and version parity.

  • envault_env_default

    Set the default environment in envault.json.

  • envault_env_map

    Map an environment slug to a local env file path in envault.json.

  • envault_env_unmapwrite action

    Remove an environment-to-file mapping from envault.json.

  • envault_generate_hookswrite action

    Create or update git post-merge hook that triggers envault pull after merges.

  • envault_init

    Initialize envault.json and project linkage in the current directory. Use for first-time project setup.

  • envault_login

    Start CLI device-flow login in the browser and store local CLI access token. Use when auth is missing or expired.

  • envault_mcp_install

    Install MCP integration config for local workspace and/or global editor clients.

  • envault_mcp_updatewrite action

    Update MCP package/config for local workspace and/or global editor clients.

  • envault_pull

    Fetch remote secrets into a local env file. Use before local development runs, diffs, or edits. This updates local files only and does not require HITL approval.

  • envault_pushwrite action

    Submit local secret changes for HITL approval. IMPORTANT: treat this as an approval-request step, not immediate execution. If the response indicates pending approval (for example HTTP 202 Accepted with approval_id/approval_url), you must explicitly show the approval_url to the user, instruct them to open it in a browser and approve/reject, then wait for user confirmation or poll status before assu

  • envault_remove_local_keywrite action

    Remove a key from local env file. If autoPush=true, this triggers envault_push and may return pending HITL approval requiring browser approval.

  • envault_runwrite action

    Run a local command with Envault secrets injected into process environment. Use when the user asks to run an app/script with managed secrets.

  • envault_sdk_install

    Install Envault TypeScript SDK either in current project, globally, or both.

  • envault_sdk_updatewrite action

    Update Envault TypeScript SDK either in current project, globally, or both.

  • envault_set_local_key

    Set/update a key=value in local env file. If autoPush=true, this triggers envault_push and may return pending HITL approval requiring browser approval.

  • envault_status

    Read-only context check for auth, project, role, permissions, active environment, and mapped local env file. Use this first when context is unclear.

  • envault_version

    Print installed Envault CLI version.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

2 medium
  • Code scan3 source files scanned15/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 26 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • mediumnpm install lifecycle script presentinstall.script
  • mediumnpm install lifecycle script presentinstall.script
    package.json: … "prepublishOnly": "npm run check", "postinstall": "node postinstall.mjs" }, "publishC…
Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Envault compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
68/100
higher than 33% of 4,460 AI and agents servers
Tools
23
the typical AI and agents server has 6
Tools that change things
39%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
4
more than 77% of 2,711 AI and agents servers
Downloads a week
46
more than 38% of 1,538 AI and agents servers with a package

What its tools let an agent do: 14 read · 9 change

Install Envault in Claude Code, Cursor or VS Code

Runs npx -y @dinanathdash/envault-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add envault -- npx -y @dinanathdash/envault-mcp-server
Add to Cursor

What the publisher says

From the Envault repository's README, as published. We do not edit it. Read it on GitHub

Envault

Envault is a secure, modern vault application built with Next.js, Supabase, and Tailwind CSS. It provides a robust authentication system and a sleek user interface for storing and managing sensitive information.

Features

  • Bank-Grade Security: AES-256-GCM encryption with master/data key hierarchy and automatic key rotation.
  • Project Workspaces: Organize secrets into distinct projects for better management.
  • Semantic Routing: Clean, GitHub-style URLs (/[username]/[project-slug]) for easy sharing and navigation.
  • Team Collaboration: Secure project sharing with strict Role-Based Access Control:
  • Owner: Full administrative control (Rename, Delete, Manage Team).
  • Editor: Active contributor (Read/Write secrets, request to Share).
  • Viewer: Read-only access to variables.
  • Secure Authentication: Powered by Supabase Auth for robust user management, including Passkey support for passwordless, biometric login.
  • Modern UI/UX: Built with Tailwind CSS, Shadcn UI, and Framer Motion for a premium experience.
  • Interactive 3D Elements: High-performance 3D visuals powered by React Three Fiber.
  • Keyboard First: Navigate efficiently with fully customizable, conflict-free hotkeys.
  • Responsive Design: Fully responsive layout that works seamlessly on desktop and mobile.

CLI

Envault natively supports the Model Context Protocol (MCP), so AI coding assistants like Claude Desktop, Cursor, and RooCode/Cline can pull and push your secure environments effortlessly.

# Automatically configure your AI clients (Global & Local Workspaces)
envault mcp install

# Or install strictly for the current workspace
envault mcp install --local

Installation

macOS & Linux (Universal)

curl -fsSL https://raw.githubusercontent.com/DinanathDash/Envault/main/install.sh | sh

macOS (Homebrew)

brew tap DinanathDash/envault
brew install --formula envault

Homebrew cask installs are deprecated. If you installed via cask, migrate with:

brew uninstall --cask dinanathdash/envault/envault
brew install --formula envault

For more details, check out the CLI Documentation.

Local Testing

Envault local development now uses portless with HTTPS hostnames.

npm install -g portless

To use the Envault CLI with the local development server, set the ENVAULTCLIURL environment variable:

export ENVAULT_CLI_URL="https://envault.localhost:1355/api/cli"
envault login

For one-command envault run local app startup, prefer hosted API fetch-first behavior by not setting ENVAULTCLIURL/ENVAULTBASEURL.

Security Architecture

Envault uses a hybrid encryption model to ensure maximum security:

  1. Master Key: A 32-byte key stored in environment variables, used solely to encrypt/decrypt Data Keys.
  2. Data Keys: Unique keys for encrypting actual data. These are stored encrypted in the database.
  3. Key Rotation: Data keys can be rotated. The active key is cached in Redis for high performance without compromising security.
  4. AES-256-GCM: Industry-standard authenticated encryption for all secrets.

Tech Stack

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Envault: common questions

Is Envault MCP server safe?
With care: it is graded C, so read the findings first (68/100). Read the Envault safety report
How do I install Envault?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Envault need an API key?
Yes. The registry entry asks for ENVAULT_TOKEN.
Is Envault maintained?
The last commit was 63 days ago (2026-09-02). The latest release is v1.12.0.
What can I use instead of Envault?
Servers from other publishers that do the same job: Agent-Native Chat MCP server and CHAP Coordinator MCP server.
How does Envault compare with other AI and agents MCP servers?
safety score 68/100 (higher than 33% of 4,460 AI and agents servers); tools 23 (the typical AI and agents server has 6); tools that change things 39% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Envault

Same job from other publishers: the closest match first, then the best rated.

  • Agent-Native Chat
    Minimal chat-first app with durable threads, actions, and the app-agent loop
    A
  • CHAP Coordinator
    Auditable records of human decisions over AI agent work. Approvals, edits, overrides, escalations.
    A