Credential vault for AI agents — encrypted storage, lease-based access, CRP support.
Connect Runs on your machine
claude mcp add sanctum -e SANCTUM_VAULT_PATH=<SANCTUM_VAULT_PATH> -e SANCTUM_PASSPHRASE=<SANCTUM_PASSPHRASE> -- npx -y @sanctumai/[email protected]
{
"mcpServers": {
"sanctum": {
"command": "npx",
"args": [
"-y",
"@sanctumai/[email protected]"
],
"env": {
"SANCTUM_VAULT_PATH": "<SANCTUM_VAULT_PATH>",
"SANCTUM_PASSPHRASE": "<SANCTUM_PASSPHRASE>"
}
}
}
}
{
"mcpServers": {
"sanctum": {
"command": "npx",
"args": [
"-y",
"@sanctumai/[email protected]"
],
"env": {
"SANCTUM_VAULT_PATH": "<SANCTUM_VAULT_PATH>",
"SANCTUM_PASSPHRASE": "<SANCTUM_PASSPHRASE>"
}
}
}
}
{
"servers": {
"sanctum": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@sanctumai/[email protected]"
],
"env": {
"SANCTUM_VAULT_PATH": "<SANCTUM_VAULT_PATH>",
"SANCTUM_PASSPHRASE": "<SANCTUM_PASSPHRASE>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
SANCTUM_VAULT_PATHOptional | Path to the SanctumAI vault directory. Defaults to ~/.sanctum |
SANCTUM_PASSPHRASEOptional, secret | Vault passphrase for automated/headless operation. If not set, the vault must be unlocked interactively or via the web UI. |
Details
| Package | @sanctumai/[email protected] (NPM, stdio) |
| First published | 14 Feb 2026 |
| Last updated | 14 Feb 2026 |
| Registry name | io.github.jwgale/sanctum |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
