1Claw Vault

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "io.github.1clawAI/1claw-mcp",
  "description": "HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.",
  "title": "1Claw Vault",
  "repository": {
    "url": "https://github.com/1clawAI/1claw-mcp",
    "source": "github"
  },
  "version": "0.56.3",
  "websiteUrl": "https://1claw.xyz",
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "@1claw/mcp",
      "version": "0.56.3",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "Agent API key (ocv_...). Exchanged for a short-lived JWT; auto-discovers agent ID and vault. Recommended for stdio.",
          "isSecret": true,
          "name": "ONECLAW_AGENT_API_KEY"
        },
        {
          "description": "Optional agent UUID when pinning identity (usually auto-discovered from the API key).",
          "name": "ONECLAW_AGENT_ID"
        },
        {
          "description": "Optional vault UUID when the agent can access multiple vaults.",
          "name": "ONECLAW_VAULT_ID"
        },
        {
          "description": "Vault API base URL (default https://api.1claw.xyz).",
          "name": "ONECLAW_BASE_URL"
        },
        {
          "description": "Set to true for security-only mode (inspect_content only; no vault credentials).",
          "name": "ONECLAW_LOCAL_ONLY"
        }
      ]
    }
  ]
}