MCP server for Enpass vaults: entries, passwords and TOTP/2FA codes, keychain-backed.
MCP server for Enpass vaults: entries, passwords and TOTP/2FA codes, keychain-backed.
Runs locally over stdio. Your Enpass vault never leaves your machine, and your master password never passes through the model: it is stored in your operating system's keychain and read directly by the server.
vault.enpassdb, SQLCipher format) - On Linux: a Secret Service provider (GNOME Keyring or KWallet) for password storage Native dependencies (better-sqlite3-multiple-ciphers, @napi-rs/keyring) ship prebuilt binaries for common platforms, so no compiler is required in the normal case.Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| list_vaults | List registered vaults, whether their file exists, whether a password is stored, and whether they are unlocked. |
| unlock_vault | Unlock a vault using the master password from the OS keychain. Takes only a vault name, never a password. |
| lock_vault | Lock a vault and clear its derived key from memory. |
| list_items | List entries (title, username, URL). Never returns passwords. Supports query, category, folder, limit. |
| get_item | Return a full entry including all field values (password, TOTP, etc.) and its attachment list. |
| get_password | Return the password and, if present, the current TOTP code of an entry. |
| get_otp | Generate the current TOTP / 2FA one-time code for an entry, with seconds until it rotates. |
| list_attachments | List an entry's file attachments (name, size, MIME). |
| export_attachment | Decrypt an attachment; writes it to disk and returns the path (or base64 inline for small files). |
| sync_status | List the vaults that use Enpass folder sync and whether the copy in the sync folder is newer. |
| create_item | Create an entry, including custom fields; sensitive values are encrypted the way Enpass does it. |
| delete_item | Delete an entry, or move it to the trash, leaving the tombstone Enpass uses so the deletion syncs. |
| sync_pull | Take in a newer copy from the sync folder, after backing up the local vault. |
{
"mcpServers": {
"enpass": {
"command": "enpass-mcp",
"args": [
"serve"
]
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
vault.enpassdb, SQLCipher format) - On Linux: a Secret Service provider (GNOME Keyring or KWallet) for password storage Native dependencies (better-sqlite3-multiple-ciphers, @napi-rs/keyring) ship prebuilt binaries for common platforms, so no compiler is required in the normal case.Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.
Self-hosted MCP server: pi-coding-agent tools (run_prompt, file ops) over streamable HTTP.
Build Spring Boot applications, ready for coding agents, including best practices.
Bring github repos into context using this mcp server
Evidence-backed codebase understanding with file:line citations, for AI clients over MCP.