Claude Code mod
vault
Credential vault for Claude Code: macOS Keychain secrets, per-directory grants, injected env, redacted output, pane with import/export
Install
git clone https://github.com/yocloud-code/claude-vault.git
claude --plugin-dir ./claude-vault/.The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.
What it can access
- Reach
- L2Writes or runs: runs processes, writes files, drives Claude, writes the clipboard, reads files, reads env vars, reads mod state, persists state, draws
- Sees
- mcp__vault__vault_list calls, mcp__vault__vault_exec calls, Bash calls, every tool call
- Draws in
AbovePromptPane- Hooks
tool.callsession.appendsession.startcommand.runui.render
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- yocloud-code/claude-vault
- Folder
.- Last updated
- 18 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is vault?
Credential vault for Claude Code: macOS Keychain secrets, per-directory grants, injected env, redacted output, pane with import/export It is a mod for Claude Code, from yocloud-code/claude-vault on GitHub.
What can the vault mod access?
Its widest reach is "writes or runs" (runs processes, writes files, drives Claude, writes the clipboard, reads files, reads env vars, reads mod state, persists state, draws). It sees mcp__vault__vault_list calls, mcp__vault__vault_exec calls, Bash calls, every tool call. It draws in AbovePrompt, Pane. Like any mod, it runs with your permissions.
How do I install vault?
Clone yocloud-code/claude-vault and start Claude Code with --plugin-dir pointing at the mod's folder (.).
Is vault popular?
yocloud-code/claude-vault has 3 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 18 October 2026.
More guard & safety mods
secret-guard
3vumichien/claude-code-mods-kit
Hides secrets in tool results before Claude reads them: the secret values of every .env and .env.* from your session's folder up to the drive root, and anything that looks like a secret (KEY=VALUE under a secret name, passwords in URLs, private keys, JWTs, AWS keys, Kubernetes Secrets); tells Claude how to use them without printing them
waiting-bell
3ibrahimkobeissy/claude-mods
Rings a bell and shows a banner whenever Claude is blocked waiting for you, repeating every 5 minutes until you answer
redact-restore
3isandrel/redact-restore
Reversible redaction for Claude Code: private values are replaced with placeholders before the model API sees them and restored locally. No API gateway.
auto-approve
2llkhacquan/claude-mods
Answers permission prompts for you: regex layers allow routine tool calls and always ask on pushes to protected branches, and haiku judges the rest against your plain-text rules. Offers a rule after you approve the same kind of call twice, and logs every decision so /auto-approve learn can suggest more
receipt
3yash-gadodia/claude-mods
Keeps a per-turn tally of edits, runs, curls and destructive commands and shows it on the turn footer; a claim with no run flags the spinner, a destructive Bash unfolds its tool group, and an edit-without-run turn suggests running the tests.
barmkin-mod
2samfrmr/barmkin-mod
Claude Code mods security layer: secret redaction, untrusted-content taint with a Rule-of-Two egress gate, skill inline-shell mediation guard, MCP tool-poisoning guard, skill-content screen, agent-to-agent firewall, and a Jev System One classifier gateway with an explanation surface.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.