Can I use HashiCorp Vault as a CLI?

Yes. KosmoKrator exposes a HashiCorp Vault CLI through kosmo integrations:call and the provider shortcut command. Commands can return JSON for scripts, CI, and coding agents.

Can I expose HashiCorp Vault through MCP?

Yes. The KosmoKrator MCP gateway can expose selected HashiCorp Vault tools to clients such as Claude Code, Cursor, Codex, and other MCP-compatible tools.

Where are HashiCorp Vault credentials stored?

HashiCorp Vault credentials are configured in KosmoKrator's local integration settings and reused by CLI, Lua, and MCP gateway surfaces.

Can I deny write access for HashiCorp Vault MCP tools?

Yes. Start the gateway with --write=deny for read-only clients, or use ask/allow only for trusted workspaces.

productivity

HashiCorp Vault MCP, CLI, and Lua Integration for AI Agents

HashiCorp Vault integration docs for AI agents: MCP gateway setup, HashiCorp Vault CLI commands, Lua API reference, credentials, and function schemas.

7 functions 5 read 2 write API token auth

Submit HashiCorp Vault feedback View package source

HashiCorp Vault for agents

Credentials can be configured manually in web or CLI hosts.

Use this integration from Lua code mode, the headless integrations CLI, or the KosmoKrator MCP gateway. The same package metadata powers all three surfaces.

Machine-Readable Metadata

integration_slug: vault
route_slug: vault
package: vault
auth_strategy: api_token API token
cli_setup_supported: true
cli_runtime_supported: true
mcp_gateway_supported: true
lua_supported: true
supports_multi_account: true

Quick Links

Lua APIAgent-facing namespace and function reference. HashiCorp Vault CLIHeadless setup and direct function calls. HashiCorp Vault MCPMCP gateway setup for external clients. Submit feedbackReport missing tools, auth problems, wrong docs, or runtime issues. ContributeAdd tools or improve metadata in the integrations repo.

HashiCorp Vault MCP Client Matrix

Use these pages when a specific agent client or framework needs copy-pasteable MCP setup for HashiCorp Vault.

HashiCorp Vault CLI Matrix

Use these pages for direct HashiCorp Vault CLI workflows in scripts, CI, cron, and agent wrappers.

CI HashiCorp Vault CLI for CI. Cron Jobs HashiCorp Vault CLI for cron jobs. Shell Scripts HashiCorp Vault CLI for shell scripts. Headless Automation HashiCorp Vault CLI for headless automation. Coding Agents HashiCorp Vault CLI for coding agents.

Function Catalog

Function	Type	Parameters	Description
`vault.vault_list_secrets`	Read `read`	2	List secrets at a given path in a HashiCorp Vault KV v2 secrets engine. Returns the keys (directory entries) at the specified path.
`vault.vault_get_secret`	Read `read`	3	Get the latest version of a secret from a HashiCorp Vault KV v2 secrets engine. Optionally specify a version number to retrieve a specific version.
`vault.vault_create_secret`	Write `write`	3	Create or update a secret in a HashiCorp Vault KV v2 secrets engine. Provide the secret path and a key-value data object.
`vault.vault_delete_secret`	Write `write`	2	Permanently delete all versions and metadata of a secret from a HashiCorp Vault KV v2 secrets engine. This action is irreversible.
`vault.vault_list_policies`	Read `read`	0	List all ACL policies configured in HashiCorp Vault. Returns an array of policy names.
`vault.vault_get_policy`	Read `read`	1	Get details of a specific ACL policy in HashiCorp Vault, including its name and HCL rules.
`vault.vault_get_current_user`	Read `read`	0	Look up the current Vault token's information, including display name, policies, TTL, and metadata.