Listing Thumbnail

    Vault MCP Server

     Info
    Deployed on AWS
    The Vault MCP Server enables operators to use natural language to perform basic queries and operations in Vault, which would otherwise require traditional methods of issuing requests to Vault via Vault API. Note: This Vault MCP Server release is experimental in nature and intended for development, testing, and evaluation purposes. Use of the Vault MCP server in production settings is not recommended at this time.
    4.3

    Overview

    The Vault MCP Server enables operators to use natural language to perform basic queries and operations in Vault, which would otherwise require traditional methods of issuing requests to Vault via Vault API.

    For this experimental release, Vault operators can configure Vault MCP server in local standard input/output (stdio) mode or streamableHTTP transport and interacts with Vault APIs using any MCP client.

    We are seeking feedback from Vault operators and users regarding the usefulness of such capabilities. Based on the customer feedback, we plan to offer a richer set of capabilities to perform additional queries and/or otherwise interact with Vault APIs and eco-system plugins, including remote versions of the MCP Servers with security features.

    Note: This Vault MCP Server release is experimental in nature and intended for development, testing, and evaluation purposes. Use of the Vault MCP server in production settings is not recommended at this time.

    Supported Vault API commands include:

    • Create new mounts in Vault (KV v1, KV v2)
    • List all available mounts
    • Deletes a mount
    • Write secrets to KV mounts
    • Read secrets from KV mounts
    • List all secrets under a path

    Highlights

    • Read or Write key/value (KV v1, KV v2) secrets to Vault
    • Create or delete mounts in Vault (KV v1, KV v2)
    • List all secrets or mounts in Vault

    Details

    Delivery method

    Supported services

    Delivery option
    Container

    Latest version

    Operating system
    Linux

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Vault MCP Server

     Info
    This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Vendor refund policy

    N/A

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Container

    Supported services: Learn more 
    • Amazon ECS
    • Amazon ECS Anywhere
    Container image

    Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.

    Version release notes

    Supported Vault API commands include:

    Create new mounts in Vault (KV v1, KV v2) List all available mounts Deletes a mount Write secrets to KV mounts Read secrets from KV mounts List all secrets under a path

    Additional details

    Usage instructions

    1. Install and configure the AWS CLI

    https://docs.usvm.9mmj.com/cli/latest/userguide/installing.html 

    1. Retrieve the login command to authenticate your Docker client to your registry

    aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 709825985650.dkr.ecr.us-east-1.amazonaws.com

    1. Enter the login command retrieved in step 2. On successful login the following message will be seen

    Login Succeeded

    1. Pull the docker image

    709825985650.dkr.ecr.us-east-1.amazonaws.com/hashicorp/vault-mcp-server:0.1.0

    1. Start the instance of the container in the following way

    docker run -it -e VAULT_TOKEN="<INPUT_HERE>" -e VAULT_ADDR="<INPUT_HERE>" 709825985650.dkr.ecr.us-east-1.amazonaws.com/hashicorp/vault-mcp-server:0.1.0

    1. To integrate this with a IDE of your choice, use the following documentation as an example

    https://developer.hashicorp.com/terraform/docs/tools/mcp-server/deploy 

    Support

    Vendor support

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    4.3
    54 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    57%
    39%
    2%
    2%
    0%
    0 AWS reviews
    |
    54 external reviews
    External reviews are from G2 .
    Harshdeep M.

    IBM Vault: Ironclad, Low-Latency Secrets Management with Strong Multi-Cloud Integrations

    Reviewed on Sep 13, 2026
    Review provided by G2
    What do you like best about the product?
    IBM Vault feels like an ironclad foundation for modern operations, pairing low-latency performance with an identity-first approach to integrations. It can bridge major clouds like AWS and Azure without leaning on risky, static credentials, which makes the overall setup feel far more defensible.

    That said, the early experience hasn’t always been friendly. Initial onboarding and the CLI-heavy UI/UX traditionally felt like a trial by fire for developers. The recent IBM Vault 2.0 Updates, however, have noticeably improved the support and onboarding curve, with interactive visual policy wizards and clearer in-product guidance that make it easier to get oriented and move forward with confidence.

    On the financial side, it can deliver a massive pricing and ROI payoff by acting like a high-value insurance policy against devastating security breaches, even as IBM nudges growing teams toward higher enterprise licensing models. And while it still doesn’t offer a conversational AI assistant directly in the dashboard, it does provide crucial intelligence protection by securing, rotating, and managing the high-stakes database keys needed to run modern corporate LLM and AI streaming pipelines.
    What do you dislike about the product?
    The biggest drawbacks of IBM Vault center around its immense operational complexity, a steep learning curve for developers, and escalating enterprise costs following IBM's multi-billion dollar acquisition. Because Vault acts as the single, centralized gatekeeper for all your application credentials, maintaining its high-availability storage backends and manual "unsealing" processes requires specialized engineering hours—introducing a massive single point of failure where a misconfigured cluster can instantly cause a total application blackout. Furthermore, while recent updates have polished the interface, advanced configuration still forces engineers back into a dense, text-heavy CLI, making everyday troubleshooting frustrating for junior teams. Financially, IBM’s shifting roadmap has phased out more accessible, lower-tier SaaS entry points, resulting in an aggressive pricing squeeze that makes it increasingly difficult for mid-sized startups and growing companies to justify the investment compared to simpler, cloud-native alternatives.
    What problems is the product solving and how is that benefiting you?
    At its core, IBM Vault solves the critical problem of "secret sprawl"—the dangerous practice where API keys, database tokens, and SSH passwords end up hardcoded in source code or scattered across configuration files. By centralizing these credentials into a secure, encrypted control plane and leveraging identity-based access, it provides a massive operational benefit: the complete elimination of static, long-lived credentials. Instead of worrying about manual password rotation or leaked credentials causing a massive breach, the platform utilizes dynamic secret engines to issue temporary, short-lived tokens on the fly that automatically self-destruct after use. This heavily reduces the system's overall attack surface, ensures seamless zero-trust compliance, and delivers immense peace of mind by automating audit logging and infrastructure identity verification.
    Jatin C.

    Easy Integration, Solid API Performance, and Clear Documentation

    Reviewed on Jun 22, 2026
    Review provided by G2
    What do you like best about the product?
    It was easy to integrate and straightforward to understand. I feel the API performance is solid, and the documentation is clear and helpful for new developers. The UI is intuitive and easy to navigate.
    What do you dislike about the product?
    Honestly, I don’t have much to dislike about Vault, especially considering how much easier it’s made our lives when it comes to storing credentials.
    What problems is the product solving and how is that benefiting you?
    It has helped us a lot with integration across different environments and with managing credentials used across our products. Integrating it with the application was also pretty seamless.
    Sailee S.

    Reliable and Easy Secret Management

    Reviewed on Jun 20, 2026
    Review provided by G2
    What do you like best about the product?
    I used IBM Vault (formerly HashiCorp Vault) to manage my secrets and sensitive data, and I found the platform to be reliable and easy to integrate. It's a trusted solution for me. I liked how my secrets were managed.
    What do you dislike about the product?
    nothing as such
    What problems is the product solving and how is that benefiting you?
    I used IBM Vault to manage my secrets and sensitive data, which is crucial for security. It's reliable and easy to integrate, providing a trusted solution.
    Mohan K.

    Secure and Streamlined Secret Management with IBM Vault

    Reviewed on Jun 19, 2026
    Review provided by G2
    What do you like best about the product?
    I like how IBM Vault (formerly HashiCorp Vault) helps my team securely manage secrets across multiple environments. I value the centralized secret management, dynamic secret access control policies, and audit logging the most. The centralized secret management feature lets us securely store and manage sensitive information like API keys and credentials in a single location. I find the dynamic secret feature particularly useful as it allows us to generate temporary credentials on demand, which automatically expire, reducing security risks. The integrations with CICD partners and cloud services also stand out as valuable, helping us automate secret management while reducing manual credential handling and operational overhead.
    What do you dislike about the product?
    Configuring authentication methods, access policy, and integrating IBM Vault with existing applications requires some planning and a solid understanding of secure setups.
    What problems is the product solving and how is that benefiting you?
    IBM Vault helps us secure, store, and manage application secrets, centralizing secret management and enforcing access control. It reduces the risk of exposing sensitive information and improves compliance efforts by integrating with our CICD pipeline and backend services.
    UDAY SAI G.

    Reliable Security Management, Steep Learning Curve

    Reviewed on Jun 17, 2026
    Review provided by G2
    What do you like best about the product?
    I like IBM Vault because it makes it easier to manage sensitive access details in one secure place without unnecessary hassle. As someone working with software systems, this setup saves time, reduces mistakes, and makes day-to-day work feel more organized. It solves the problem of keeping sensitive credentials from being scattered and hard to control, leading to less manual handling and fewer chances of exposing something by mistake. IBM Vault keeps sensitive info organized and secure without making everything feel complicated, giving me more confidence that access is handled properly, which saves time and reduces stress when working on projects.
    What do you dislike about the product?
    It can feel a bit complicated at first and the setup may take more time. I have to define who can use it, what they can see and how secrets are stored, so it can take a bit of time to get everything right.
    What problems is the product solving and how is that benefiting you?
    IBM Vault organizes and secures sensitive access details in one place, reducing manual handling and mistakes. It solves the problem of scattered credentials, saving time, reducing stress, and providing confidence in proper access management.
    View all reviews