NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

1Claw Vault

io.github.1clawAI/1claw-mcp ยท v0.56.3

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

Website Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add 1claw-mcp -e ONECLAW_AGENT_API_KEY=<ONECLAW_AGENT_API_KEY> -e ONECLAW_AGENT_ID=<ONECLAW_AGENT_ID> -e ONECLAW_VAULT_ID=<ONECLAW_VAULT_ID> -e ONECLAW_BASE_URL=<ONECLAW_BASE_URL> -e ONECLAW_LOCAL_ONLY=<ONECLAW_LOCAL_ONLY> -- npx -y @1claw/[email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "1claw-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@1claw/[email protected]"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<ONECLAW_AGENT_API_KEY>",
        "ONECLAW_AGENT_ID": "<ONECLAW_AGENT_ID>",
        "ONECLAW_VAULT_ID": "<ONECLAW_VAULT_ID>",
        "ONECLAW_BASE_URL": "<ONECLAW_BASE_URL>",
        "ONECLAW_LOCAL_ONLY": "<ONECLAW_LOCAL_ONLY>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "1claw-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@1claw/[email protected]"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<ONECLAW_AGENT_API_KEY>",
        "ONECLAW_AGENT_ID": "<ONECLAW_AGENT_ID>",
        "ONECLAW_VAULT_ID": "<ONECLAW_VAULT_ID>",
        "ONECLAW_BASE_URL": "<ONECLAW_BASE_URL>",
        "ONECLAW_LOCAL_ONLY": "<ONECLAW_LOCAL_ONLY>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "1claw-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@1claw/[email protected]"
      ],
      "env": {
        "ONECLAW_AGENT_API_KEY": "<ONECLAW_AGENT_API_KEY>",
        "ONECLAW_AGENT_ID": "<ONECLAW_AGENT_ID>",
        "ONECLAW_VAULT_ID": "<ONECLAW_VAULT_ID>",
        "ONECLAW_BASE_URL": "<ONECLAW_BASE_URL>",
        "ONECLAW_LOCAL_ONLY": "<ONECLAW_LOCAL_ONLY>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
ONECLAW_AGENT_API_KEY
Optional, secret		Agent API key (ocv_...). Exchanged for a short-lived JWT; auto-discovers agent ID and vault. Recommended for stdio.
ONECLAW_AGENT_ID
Optional		Optional agent UUID when pinning identity (usually auto-discovered from the API key).
ONECLAW_VAULT_ID
Optional		Optional vault UUID when the agent can access multiple vaults.
ONECLAW_BASE_URL
Optional		Vault API base URL (default https://api.1claw.xyz).
ONECLAW_LOCAL_ONLY
Optional		Set to true for security-only mode (inspect_content only; no vault credentials).

Details

Package@1claw/[email protected] (NPM, stdio)
First published24 Aug 2026
Last updated24 Aug 2026
Registry nameio.github.1clawAI/1claw-mcp

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.