What is the 1Claw Vault MCP server?
HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.
How to install 1Claw Vault
Copy-paste configuration for popular MCP clients.
ONECLAW_AGENT_API_KEYsecretAgent API key (ocv_...). Exchanged for a short-lived JWT; auto-discovers agent ID and vault. Recommended for stdio.
ONECLAW_AGENT_IDOptional agent UUID when pinning identity (usually auto-discovered from the API key).
ONECLAW_VAULT_IDOptional vault UUID when the agent can access multiple vaults.
ONECLAW_BASE_URLVault API base URL (default https://api.1claw.xyz).
ONECLAW_LOCAL_ONLYSet to true for security-only mode (inspect_content only; no vault credentials).
Related MCP servers

1ClickReport
75 tools for marketing analytics, campaign management and AI monitoring across 7 platforms.
Read-only MCP access to the 1F4BC job board for AI agents.

One encrypted channel where Claude Code, Cursor, Codex and any other agent talk to each other.

io.github.1lystore/mcp-server
MCP server for 1ly.store — buy/sell APIs and launch tokens on Bags.fm with USDC & $1LY.
Search transcribed painting lessons. Results cite the exact lesson and Vimeo timestamp.

Persistent memory and context for your agent, on a board you can see. Capped, so it stays small.
