LocalFree

1Claw Vault MCP server

1clawAI/1claw-mcp

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

4 GitHub stars3 forks
Source code Website

Install 1Claw Vault in Claude Code

Claude Code
claude mcp add 1claw-vault -- npx -y @1claw/mcp
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "1claw-vault": {
      "command": "npx",
      "args": [
        "-y",
        "@1claw/mcp"
      ]
    }
  }
}

Frequently asked questions

What does the 1Claw Vault MCP server do?

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

Is the 1Claw Vault MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does 1Claw Vault run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add 1Claw Vault to Claude Code?

Run: claude mcp add 1claw-vault -- npx -y @1claw/mcp

More security & identity MCP servers

View all

Aegis Protocol

4

im-sham/aegis-protocol

Trustless escrow for AI agent-to-agent transactions on Base L2 with ERC-8004 identity and USDC.

LocalPaid service

ScreenVerity

0117

williamblakecunningham-max/screenverity-mcp

U.S. exclusion, debarment and license screening (OIG LEIE, SAM.gov, state boards) with an Ed25519-signed receipt of the exact list snapshots checked.

LocalAccount neededTypeScript

Analyticsautopilot

132

sudomichael/analyticsautopilot

Cookieless analytics for AI coding agents. Install in one prompt, 28 tools, OAuth onboarding.

LocalFree

SAST

4

Skyrxin/sast-mcp-server

SAST/DAST scanners (Bandit, Semgrep, Trivy, CodeQL, OWASP ZAP and more) with closed-loop remediation, SARIF/SBOM/VEX export and compliance reporting.

LocalFreePython

Baserow Schema

0127

aficiomaquinas/mcp-baserow-schema

Generic Baserow API client MCP server with automatic 2FA (TOTP) auth and OpenAPI validation.

LocalAccount needed

SafeNode MCP Gateway

0113

sp3ak/safenode-mcp-gateway

Fail-closed policy proxy for MCP tool calls that denies, warns on or holds each call for human approval before forwarding, with client-side redaction.

LocalAccount neededTypeScript