Vault (Docker) MCP Server

123456789101112131415161718192021222324252627282930313233343536373839404142434445{
  "type": "stdio",
  "command": "docker",
  "args": [
    "run",
    "-i",
    "--rm",
    "-e",
    "VAULT_ADDR",
    "-e",
    "VAULT_TOKEN",
    "hashicorp/vault-mcp-server:latest"
  ],
  "env": {
    "VAULT_ADDR": "${input:VAULT_ADDR}",
    "VAULT_TOKEN": "${input:VAULT_TOKEN}"
  },
  "metadata": {
    "inputs": [
      {
        "id": "VAULT_ADDR",
        "label": "Vault Address",
        "description": "Base URL of your HashiCorp Vault server. Use host.docker.internal instead of localhost to reach a Vault instance running on the host machine (e.g., https://host.docker.internal:8200).",
        "type": "url",
        "required": true,
        "secret": false,
        "placeholder": "https://vault.example.com:8200"
      },
      {
        "id": "VAULT_TOKEN",
        "label": "Vault Token",
        "description": "Vault authentication token used to access secrets and secrets engines. The token's policies determine which paths and operations are permitted.",
        "type": "text",
        "required": true,
        "secret": true,
        "placeholder": "hvs.****************************",
        "obtain": {
          "url": "https://developer.hashicorp.com/vault/docs/commands/token/create",
          "instructions": "1. Authenticate to your Vault server (e.g., vault login)\n2. Create a token scoped to the policies you need: vault token create -policy=<policy>\n3. Copy the token value from the output (token field)",
          "button_label": "Create Token"
        }
      }
    ]
  }
}