Delinea MCP Server

Official Delinea MCP server for the Delinea Secret Server and Platform APIs

Local serverstdioPython

What is the Delinea MCP server?

Connect Delinea to Claude, Cursor or any other MCP client and it stops being a tab you switch to. Official Delinea MCP server for the Delinea Secret Server and Platform APIs. The delinea mcp server is what makes that connection.

What the server does

Secrets such as passwords continue to come from environment variables. Provide DELINEA_PASSWORD in your shell environment. Optional features rely on additional variables such as AZURE_OPENAI_KEY or PLATFORM_SERVICE_PASSWORD.

  • Automatic authentication against Secret Server
  • Extensive Secret Server tool set for managing folders, secrets, users, groups and roles
  • ChatGPT compatibility tools (search and fetch) for controlled AI interactions
  • Optional Delinea Platform user management tools
  • Supports either Server Sent Events or STDIO transport modes
  • OAuth 2.0 with dynamic client registration per the MCP specification

Installation

Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client.

Credentials and setup notes

Configuration is passed through the environment: DELINEA_PASSWORD, LIVE_SECRET_ID, AZURE_OPENAI_KEY, DELINEA_BASE_URL, PLATFORM_TENANT_ID. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

Where it fits

This sits in the cloud and infrastructure group, where several servers overlap in what they claim to do but differ sharply once you actually set them up.

This entry was verified against Delinea's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.

Worth knowing first

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • Missing credentials fail quietly in some clients — if no tools show up, check the environment block first.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Configuration

VariableDescriptionRequired
DELINEA_PASSWORDConfiguration value read at startup.Optional
LIVE_SECRET_IDCredential the server authenticates with.Yes
AZURE_OPENAI_KEYCredential the server authenticates with.Yes
DELINEA_BASE_URLEndpoint or connection string the server talks to.Yes
PLATFORM_TENANT_IDConfiguration value read at startup.Optional

Frequently asked questions

It connects Delinea to MCP-compatible AI assistants such as Claude and Cursor. Instead of copying data back and forth by hand, the assistant works with Delinea directly.