read_secret

MCP tool from Vault MCP Server by hashicorp

Reads a secret from a KV mount in Vault.

How to use it

Project documentation lists read_secret for the Vault MCP Server MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), then check which tools your installed version makes available. Tool availability can depend on configuration and credentials. A server handshake does not verify this tool’s behavior. See the full listing for setup details.

Install Vault MCP Server

$docker run --cap-add=IPC_LOCK --name=vault-dev --network=mcp -p 8200:8200 hashicorp/vault server -dev
FULL VAULT MCP SERVER LISTING

Other tools in Vault MCP Server (15)

create_mount

Creates a new mount in Vault.

create_pki_issuer

Creates a new PKI issuer.

create_pki_role

Creates a new PKI role for issuing certificates.

delete_mount

Delete a mount in Vault.

delete_pki_role

Deletes a PKI role.

delete_secret

Delete secrets (or keys) in a KV mount under a specific path in Vault.

enable_pki

Enables and configures a PKI secrets engine.

issue_pki_certificate

Issues a new certificate using a PKI role.

list_mounts

Lists all mounts in Vault.

list_pki_issuers

Lists all PKI issuers in a mount.

list_pki_roles

Lists all PKI roles in a mount.

list_secrets

Lists secrets in a KV mount under a specific path in Vault.

read_pki_issuer

Reads details about a specific PKI issuer.

read_pki_role

Reads a PKI role configuration.

write_secret

Writes a secret to a KV mount in Vault.