Vaultshell MCP Server: Install & Setup

Install Vaultshell in Claude Code

Claude Code

claude mcp add vaultshell -- docker run -i --rm ghcr.io/sowhati/vaultshell:0.1.2

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "vaultshell": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/sowhati/vaultshell:0.1.2"
      ]
    }
  }
}

Frequently asked questions

What does the Vaultshell MCP server do?

Injects secrets into shell commands at exec time; plaintext never reaches the LLM context

Is the Vaultshell MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Vaultshell run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Vaultshell to Claude Code?

Run: claude mcp add vaultshell -- docker run -i --rm ghcr.io/sowhati/vaultshell:0.1.2

More security & identity MCP servers

View all

Vuln Check

ciloops/vuln-check

Local vulnerability scan on top of grype, with prioritised upgrade actions for agents.

LocalFree

Universal Host Manager

Abktya/universal-host-manager-mcp

Cross-platform FastMCP server for authenticated remote Linux/macOS host administration

LocalAccount needed

Vulnerability Exposure

MRFrazer25/Vulnerability-Exposure-MCP

Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)

LocalFree

Tremelay

CharitonMedia/Tremelay

Local MCP broker: agents call credentials through a daemon without seeing secrets.

LocalFree

Weavatrix Online

1244

Weavatrix/weavatrix-online

Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.

LocalAccount needed

ThreatLocker

WYRE-AI/threatlocker-mcp

MCP server for ThreatLocker — zero-trust endpoint protection, allowlisting, and policies.

LocalAccount needed