Bridges Claude to HashiCorp Vault through the Keymaster service for read-only secret retrieval at runtime. The server lets AI agents pull credentials and configuration values from Vault without baking secrets into prompts or configuration files. Useful when you're building autonomous workflows that need to authenticate against external services but shouldn't have secrets hardcoded anywhere in the chain. The read-only constraint keeps agents from accidentally rotating or deleting production secrets. If you're already running Vault and want Claude to handle tasks that require dynamic credential access, this gives you that connection without expanding the agent's write surface.
claude mcp add --transport stdio ainoakari-keymaster-mcp uvx keymaster-mcp