1Claw Vault MCP Server

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

Local serverstdio

What is the 1Claw Vault MCP Server?

1Claw Vault is an MCP integration. HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

Packages and local setup

The published npm package is @1claw/mcp, version 0.56.3. Its declared MCP transport is stdio.

The package declares ONECLAW_AGENT_API_KEY: Agent API key (ocv_...). Exchanged for a short-lived JWT; auto-discovers agent ID and vault. Recommended for stdio.; ONECLAW_AGENT_ID: Optional agent UUID when pinning identity (usually auto-discovered from the API key).; ONECLAW_VAULT_ID: Optional vault UUID when the agent can access multiple vaults.; ONECLAW_BASE_URL: Vault API base URL (default https://api.1claw.xyz).; ONECLAW_LOCAL_ONLY: Set to true for security-only mode (inspect_content only; no vault credentials)..

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.56.3 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related other integrations MCP servers for tools that cover the same kind of work.

Configuration

VariableDescriptionRequired
ONECLAW_AGENT_API_KEYAgent API key (ocv_...). Exchanged for a short-lived JWT; auto-discovers agent ID and vault. Recommended for stdio.Optional
ONECLAW_AGENT_IDOptional agent UUID when pinning identity (usually auto-discovered from the API key).Optional
ONECLAW_VAULT_IDOptional vault UUID when the agent can access multiple vaults.Optional
ONECLAW_BASE_URLVault API base URL (default https://api.1claw.xyz).Optional
ONECLAW_LOCAL_ONLYSet to true for security-only mode (inspect_content only; no vault credentials).Optional