HashiCorp Vault for your agents.
Connect HashiCorp Vault once and every agent you run inside Even (Claude Code, Codex, OpenCode, Even Agents) can use it: 14 curated tools, discovered on demand, with your key stored on your machine and every call going direct to HashiCorp Vault.
What agents can do with HashiCorp Vault
Curated for agents: the calls that matter, with schemas and descriptions written for tool use, not an endpoint dump.
hashicorp-vault_healthCheck the connection: returns Vault server health and seal status.
hashicorp-vault_list_secret_enginesList mounted secret engines on the Vault server.
hashicorp-vault_list_secretsList secret keys at a path (KV engine). Trailing / enumerates sub-paths.
hashicorp-vault_read_secretRead a secret at a specific path (KV v2 returns wrapped in data).
hashicorp-vault_list_policiesList all ACL policies configured on the Vault server.
hashicorp-vault_get_policyGet the rules for a specific ACL policy.
hashicorp-vault_write_secretWrite or update a secret at a specific path (KV v2). The path includes secret engine mount and data path.
hashicorp-vault_delete_secretDelete a secret (KV v2) at a specific path. Destructive; use with care.
hashicorp-vault_list_auth_methodsList enabled auth methods on the Vault server.
hashicorp-vault_create_tokenCreate a new Vault token with an optional policy, ttl, and metadata.
hashicorp-vault_lookup_tokenLook up information about a Vault token, including policies and ttl.
hashicorp-vault_list_audit_devicesList enabled audit devices on the Vault server.
hashicorp-vault_seal_statusGet the seal status of the Vault server, including sealed vs unsealed state.
hashicorp-vault_create_policyCreate or update an ACL policy with HCL rules.
Connect it in a minute
The connect flow is agent-driven: Even opens the key page in its own browser and collects the key through a secure native field. It never passes through the chat.
- Paste the prompt below into any agent running inside Even, or click Connect in Even's catalog.
- Log into Vault UI or CLI with an authenticated user.
- Create a token with appropriate policy: vault token create -policy=admin.
- Enter your Vault server URL. Paste the token.
- Paste the key into Even's secure field. Even verifies it and your agents are live.
Connect HashiCorp Vault to Even: call connect_begin("hashicorp-vault") on the even-connect MCP and walk me through it.
Vault lists secret engines and stored secrets, reads sensitive values securely, and retrieves access control policies.
More Even Connect services
One MCP server, a handful of meta-tools, every service below. Agents search for the right tool at run time, so context stays lean.