1Claw Vault MCP Server

by 1clawaiio.github.1clawAI/1claw-mcpv0.56.3

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

2Node.jsstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Active8d ago

Install 1Claw Vault MCP server

claude mcp add 1claw -e ONECLAW_AGENT_API_KEY='<oneclaw-agent-api-key>' -- npx -y @1claw/mcp

{
  "mcpServers": {
    "1claw": {
      "command": "npx",
      "args": [
        "-y",
        "@1claw/mcp"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<oneclaw-agent-api-key>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "1claw": {
      "command": "npx",
      "args": [
        "-y",
        "@1claw/mcp"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<oneclaw-agent-api-key>"
      }
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "1claw": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@1claw/mcp"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<oneclaw-agent-api-key>"
      }
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "1claw": {
      "command": "npx",
      "args": [
        "-y",
        "@1claw/mcp"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<oneclaw-agent-api-key>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Configuration

Variable	Required	Secret	Description
ONECLAW_AGENT_API_KEY	—	yes	Agent API key (ocv_...). Exchanged for a short-lived JWT; auto-discovers agent ID and vault. Recommended for stdio.
ONECLAW_AGENT_ID	—	—	Optional agent UUID when pinning identity (usually auto-discovered from the API key).
ONECLAW_VAULT_ID	—	—	Optional vault UUID when the agent can access multiple vaults.
ONECLAW_BASE_URL	—	—	Vault API base URL (default https://api.1claw.xyz).
ONECLAW_LOCAL_ONLY	—	—	Set to true for security-only mode (inspect_content only; no vault credentials).

Freshness

Active — last maintenance signal 8d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-10-01 · 8d ago · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
2026-08-24 · 47d ago · official registry · v0.56.3

FAQ

›How do I install the 1Claw Vault MCP server in Claude Code?

Run: claude mcp add 1claw -e ONECLAW_AGENT_API_KEY='<oneclaw-agent-api-key>' -- npx -y @1claw/mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does 1Claw Vault require an API key?

Yes. It expects ONECLAW_AGENT_API_KEY, of which 1 is a secret.

›Can I use 1Claw Vault as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is 1Claw Vault in the official MCP registry?

Yes, as io.github.1clawAI/1claw-mcp.