NestDaddy

SanctumAI — Credential Vault for AI Agents

io.github.jwgale/sanctum · v0.3.2

Credential vault for AI agents — encrypted storage, lease-based access, CRP support.

Connect Runs on your machine

Terminal
claude mcp add sanctum -e SANCTUM_VAULT_PATH=<SANCTUM_VAULT_PATH> -e SANCTUM_PASSPHRASE=<SANCTUM_PASSPHRASE> -- npx -y @sanctumai/[email protected]
claude_desktop_config.json
{
  "mcpServers": {
    "sanctum": {
      "command": "npx",
      "args": [
        "-y",
        "@sanctumai/[email protected]"
      ],
      "env": {
        "SANCTUM_VAULT_PATH": "<SANCTUM_VAULT_PATH>",
        "SANCTUM_PASSPHRASE": "<SANCTUM_PASSPHRASE>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "sanctum": {
      "command": "npx",
      "args": [
        "-y",
        "@sanctumai/[email protected]"
      ],
      "env": {
        "SANCTUM_VAULT_PATH": "<SANCTUM_VAULT_PATH>",
        "SANCTUM_PASSPHRASE": "<SANCTUM_PASSPHRASE>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "sanctum": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@sanctumai/[email protected]"
      ],
      "env": {
        "SANCTUM_VAULT_PATH": "<SANCTUM_VAULT_PATH>",
        "SANCTUM_PASSPHRASE": "<SANCTUM_PASSPHRASE>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
SANCTUM_VAULT_PATH
Optional
Path to the SanctumAI vault directory. Defaults to ~/.sanctum
SANCTUM_PASSPHRASE
Optional, secret
Vault passphrase for automated/headless operation. If not set, the vault must be unlocked interactively or via the web UI.

Details

Package@sanctumai/[email protected] (NPM, stdio)
First published14 Feb 2026
Last updated14 Feb 2026
Registry nameio.github.jwgale/sanctum

More ai and media servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.