Can I use HashiCorp Vault as a CLI?

Yes. KosmoKrator exposes a HashiCorp Vault CLI through kosmo integrations:call and the provider shortcut command. Commands can return JSON for scripts, CI, and coding agents.

Can I expose HashiCorp Vault through MCP?

Yes. The KosmoKrator MCP gateway can expose selected HashiCorp Vault tools to clients such as Claude Code, Cursor, Codex, and other MCP-compatible tools.

Where are HashiCorp Vault credentials stored?

HashiCorp Vault credentials are configured in KosmoKrator's local integration settings and reused by CLI, Lua, and MCP gateway surfaces.

Can I deny write access for HashiCorp Vault MCP tools?

Yes. Start the gateway with --write=deny for read-only clients, or use ask/allow only for trusted workspaces.

productivity

HashiCorp Vault MCP, CLI, and Lua Integration for AI Agents

HashiCorp Vault integration docs for AI agents: MCP gateway setup, HashiCorp Vault CLI commands, Lua API reference, credentials, and function schemas.

HashiCorp Vault for agents

Credentials can be configured manually in web or CLI hosts.

Use this integration from Lua code mode, the headless integrations CLI, or the KosmoKrator MCP gateway. The same package metadata powers all three surfaces.

Agent Surfaces

HashiCorp Vault CLIHeadless setup, JSON output, direct function calls. HashiCorp Vault MCPExpose selected tools to local MCP clients. HashiCorp Vault LuaAgent-facing namespace and Lua reference. FeedbackReport missing tools, auth issues, or bad metadata.

Machine-Readable Metadata

integration_slug: vault
route_slug: vault
package: vault
auth_strategy: api_token
cli_setup_supported: true
cli_runtime_supported: true
mcp_gateway_supported: true
lua_supported: true

Function Catalog

Function	Type	Parameters	Description
`vault.vault_list_secrets`	Read `read`	2	List secrets at a given path in a HashiCorp Vault KV v2 secrets engine. Returns the keys (directory entries) at the specified path.
`vault.vault_get_secret`	Read `read`	3	Get the latest version of a secret from a HashiCorp Vault KV v2 secrets engine. Optionally specify a version number to retrieve a specific version.
`vault.vault_create_secret`	Write `write`	3	Create or update a secret in a HashiCorp Vault KV v2 secrets engine. Provide the secret path and a key-value data object.
`vault.vault_delete_secret`	Write `write`	2	Permanently delete all versions and metadata of a secret from a HashiCorp Vault KV v2 secrets engine. This action is irreversible.
`vault.vault_list_policies`	Read `read`	0	List all ACL policies configured in HashiCorp Vault. Returns an array of policy names.
`vault.vault_get_policy`	Read `read`	1	Get details of a specific ACL policy in HashiCorp Vault, including its name and HCL rules.
`vault.vault_get_current_user`	Read `read`	0	Look up the current Vault token's information, including display name, policies, TTL, and metadata.