1Claw Vault MCP Server

Name: 1Claw Vault MCP Server
Author: io.github.1clawAI

io.github.1clawAI/1claw-mcp

Repository Registry

What is the 1Claw Vault MCP server?

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

How to install 1Claw Vault

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

ONECLAW_AGENT_API_KEY
secret
Agent API key (ocv_...). Exchanged for a short-lived JWT; auto-discovers agent ID and vault. Recommended for stdio.
ONECLAW_AGENT_ID
Optional agent UUID when pinning identity (usually auto-discovered from the API key).
ONECLAW_VAULT_ID
Optional vault UUID when the agent can access multiple vaults.
ONECLAW_BASE_URL
Vault API base URL (default https://api.1claw.xyz).
ONECLAW_LOCAL_ONLY
Set to true for security-only mode (inspect_content only; no vault credentials).

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "1claw-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@1claw/mcp"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<YOUR_ONECLAW_AGENT_API_KEY>",
        "ONECLAW_AGENT_ID": "<YOUR_ONECLAW_AGENT_ID>",
        "ONECLAW_VAULT_ID": "<YOUR_ONECLAW_VAULT_ID>",
        "ONECLAW_BASE_URL": "<YOUR_ONECLAW_BASE_URL>",
        "ONECLAW_LOCAL_ONLY": "<YOUR_ONECLAW_LOCAL_ONLY>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "1claw-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@1claw/mcp"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<YOUR_ONECLAW_AGENT_API_KEY>",
        "ONECLAW_AGENT_ID": "<YOUR_ONECLAW_AGENT_ID>",
        "ONECLAW_VAULT_ID": "<YOUR_ONECLAW_VAULT_ID>",
        "ONECLAW_BASE_URL": "<YOUR_ONECLAW_BASE_URL>",
        "ONECLAW_LOCAL_ONLY": "<YOUR_ONECLAW_LOCAL_ONLY>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "1claw-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@1claw/mcp"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<YOUR_ONECLAW_AGENT_API_KEY>",
        "ONECLAW_AGENT_ID": "<YOUR_ONECLAW_AGENT_ID>",
        "ONECLAW_VAULT_ID": "<YOUR_ONECLAW_VAULT_ID>",
        "ONECLAW_BASE_URL": "<YOUR_ONECLAW_BASE_URL>",
        "ONECLAW_LOCAL_ONLY": "<YOUR_ONECLAW_LOCAL_ONLY>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "1claw-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@1claw/mcp"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<YOUR_ONECLAW_AGENT_API_KEY>",
        "ONECLAW_AGENT_ID": "<YOUR_ONECLAW_AGENT_ID>",
        "ONECLAW_VAULT_ID": "<YOUR_ONECLAW_VAULT_ID>",
        "ONECLAW_BASE_URL": "<YOUR_ONECLAW_BASE_URL>",
        "ONECLAW_LOCAL_ONLY": "<YOUR_ONECLAW_LOCAL_ONLY>"
      }
    }
  }
}

Claude Code

claude mcp add 1claw-mcp --env ONECLAW_AGENT_API_KEY=<YOUR_ONECLAW_AGENT_API_KEY> --env ONECLAW_AGENT_ID=<YOUR_ONECLAW_AGENT_ID> --env ONECLAW_VAULT_ID=<YOUR_ONECLAW_VAULT_ID> --env ONECLAW_BASE_URL=<YOUR_ONECLAW_BASE_URL> --env ONECLAW_LOCAL_ONLY=<YOUR_ONECLAW_LOCAL_ONLY> -- npx -y @1claw/mcp