Injects secrets into shell commands at exec time; plaintext never reaches the LLM context
MCPpedia last refreshed this data
io.github.SoWhatI/vaultshell is an MCP server that injects secrets into shell commands at exec time; plaintext never reaches the LLM context. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 92/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"vaultshell": {
"args": [
"run",
"-i",
"--rm",
"-e",
"MASTER_KEY=<64 hex chars>",
"-v",
"~/.vaultshell:/home/node/.vaultshell",
"ghcr.io/sowhati/vaultshell:latest"
],
"command": "docker"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Injects secrets into shell commands at exec time; plaintext never reaches the LLM context
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'github' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked github against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in ai-ml
MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps
Let any LLM watch a video locally — and search everything it has ever watched.
The official MCP server implementation for the Perplexity API Platform
2,700+ scientific tools for AI scientists: life science, research, literature, and more.
MCP Security Weekly
Get CVE alerts and security updates for io.github.SoWhatI/vaultshell and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.