MCP.Market

Clavis MCP server

by KN0WBOT·io.github.KN0WBOT/clavis·v0.1.3
No reviews yet

Encrypted credential vault for AI agents — auto OAuth refresh, rate limiting, audit logging.

A85/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A85/100

full report

Adoption
New

0 stars37 downloads/wk

Reviews

Write one

Nobody has reviewed Clavis yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Clavis tools (4)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • call_service

    RECOMMENDED: Make an API call with server-side credential injection.

  • check_credential_status

    Check the validity and rate-limit status of credentials for a service.

  • get_credentials

    LEGACY — returns raw credential data into this conversation.

  • list_services

    List all services configured in Clavis for the authenticated developer.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 40 days ago12/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Clavis compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
85/100
higher than 70% of 48,255 servers
Tools
4
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
37
more than 28% of 12,191 servers with a package

What its tools let an agent do: 4 read

Install Clavis in Claude Code, Cursor or VS Code

Runs npx -y @clavisagent/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add clavis -- npx -y @clavisagent/mcp-server
Add to Cursor

What the publisher says

From the Clavis repository's README, as published. We do not edit it. Read it on GitHub

Clavis MCP Server

Secure credential management for Claude Desktop and MCP servers.

Features

  • 🔐 Encrypted credential storage (AES-128-CBC + HMAC-SHA256, via Fernet)
  • 🛡️ Server-side credential injection — the raw key never enters the conversation
  • 🔄 Automatic OAuth token refresh
  • 📡 Thin forwarding layer — rate limiting, audit logging, and usage tracking are all handled by the Clavis server

Installation

npx @clavisagent/mcp-server

Or install globally:

npm install -g @clavisagent/mcp-server

Usage with Claude Desktop

Add the following to your Claude Desktop configuration file (claudedesktopconfig.json):

{
  "mcpServers": {
    "clavis": {
      "command": "npx",
      "args": ["-y", "@clavisagent/mcp-server"],
      "env": {
        "CLAVIS_API_KEY": "eyJ..."
      }
    }
  }
}

Usage with Claude Code

claude mcp add clavis -- npx -y @clavisagent/mcp-server

Configuration

Available Tools

Security note

Prefer callservice over getcredentials. callservice keeps the secret server-side, so a prompt injection has no credential in context to exfiltrate. getcredentials places the raw key in the conversation and exists only for callers that must hold the token themselves.

License

MIT

Nothing above is checked by us. What we check is on the safety report.

Clavis: common questions

Is Clavis MCP server safe?
Yes, by our scan: it is graded A (85/100). Read the Clavis safety report
How do I install Clavis?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Clavis need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Clavis maintained?
The last commit was 80 days ago (2026-08-16). The latest release is v0.1.3.
What can I use instead of Clavis?
Servers from other publishers that do the same job: SSH Manager MCP server.
How does Clavis compare with other MCP servers?
safety score 85/100 (higher than 70% of 48,255 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Clavis

Same job from other publishers: the closest match first, then the best rated.

  • SSH Manager
    SSH for AI agents: commands, files, backups and health, with approval, a vault and an audit trail
    A