NestDaddy

vaultguard

io.github.ashishrao-4/vaultguard · v0.1.2

AI agents use your Obsidian secrets by name — values never reach their context.

Connect Runs on your machine

Terminal
claude mcp add vaultguard -e VAULTGUARD_PASSPHRASE=<VAULTGUARD_PASSPHRASE> -e VAULTGUARD_VAULT_PATH=<VAULTGUARD_VAULT_PATH> -e VAULTGUARD_HOME=<VAULTGUARD_HOME> -e VAULTGUARD_ALLOW_GET_SECRET=<VAULTGUARD_ALLOW_GET_SECRET> -- npx -y @ashishrao-4/[email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "vaultguard": {
      "command": "npx",
      "args": [
        "-y",
        "@ashishrao-4/[email protected]"
      ],
      "env": {
        "VAULTGUARD_PASSPHRASE": "<VAULTGUARD_PASSPHRASE>",
        "VAULTGUARD_VAULT_PATH": "<VAULTGUARD_VAULT_PATH>",
        "VAULTGUARD_HOME": "<VAULTGUARD_HOME>",
        "VAULTGUARD_ALLOW_GET_SECRET": "<VAULTGUARD_ALLOW_GET_SECRET>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "vaultguard": {
      "command": "npx",
      "args": [
        "-y",
        "@ashishrao-4/[email protected]"
      ],
      "env": {
        "VAULTGUARD_PASSPHRASE": "<VAULTGUARD_PASSPHRASE>",
        "VAULTGUARD_VAULT_PATH": "<VAULTGUARD_VAULT_PATH>",
        "VAULTGUARD_HOME": "<VAULTGUARD_HOME>",
        "VAULTGUARD_ALLOW_GET_SECRET": "<VAULTGUARD_ALLOW_GET_SECRET>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "vaultguard": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@ashishrao-4/[email protected]"
      ],
      "env": {
        "VAULTGUARD_PASSPHRASE": "<VAULTGUARD_PASSPHRASE>",
        "VAULTGUARD_VAULT_PATH": "<VAULTGUARD_VAULT_PATH>",
        "VAULTGUARD_HOME": "<VAULTGUARD_HOME>",
        "VAULTGUARD_ALLOW_GET_SECRET": "<VAULTGUARD_ALLOW_GET_SECRET>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
VAULTGUARD_PASSPHRASE
Required, secret
Passphrase that decrypts the encrypted secret blocks in your Obsidian vault.
VAULTGUARD_VAULT_PATH
Optional
Path to your Obsidian vault (overrides the one in ~/.vaultguard/config.json).
VAULTGUARD_HOME
Optional
Config directory (defaults to ~/.vaultguard).
VAULTGUARD_ALLOW_GET_SECRET
Optional
Set to 1 to enable get_secret (default: disabled so values never reach the agent).

Details

Package@ashishrao-4/[email protected] (NPM, stdio)
First published18 Sep 2026
Last updated18 Sep 2026
Registry nameio.github.ashishrao-4/vaultguard

More productivity servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.