MCP server tools
The Vault MCP server provides specialized tools that AI models can use to access and perform certain Vault operations. You do not need to invoke the tools manually, they work automatically when you ask relevant questions of your AI agent.
Key-Value (kv) tools
| Tool | Purpose | What it returns |
|---|---|---|
list_secrets | List all secrets stored in Vault | A list of secret paths |
create_secret | Create a new secret in Vault | Confirmation of the secret creation |
read_secret | Retrieve the value of a specific secret | The secret value |
delete_secret | Delete a specific secret from Vault | Confirmation of the secret deletion |
Example prompt: "How can I securely store and access an API key for my application?"
Public Key Infrastructure (pki) tools
| Tool | Purpose | What it returns |
|---|---|---|
create_pki_issuer | Create a new PKI issuer in Vault | Confirmation of the PKI issuer creation |
create_pki_role | Create a new PKI role in Vault | Confirmation of the PKI role creation |
delete_pki_role | Delete a specific PKI role from Vault | Confirmation of the PKI role deletion |
enable_pki | Enable the PKI secrets engine in Vault | Confirmation of the PKI engine enablement |
issue_pki_certificate | Issue a new certificate from a PKI role | The issued certificate details |
list_pki_issuers | List all PKI issuers in Vault | A list of PKI issuers |
list_pki_roles | List all PKI roles in Vault | A list of PKI roles |
read_pki_issuer | Retrieve details of a specific PKI issuer | Details of the PKI issuer |
read_pki_role | Retrieve details of a specific PKI role | Details of the PKI role |
Example prompt: "Show me how to issue pki certificate using the app-dev role."
System (sys) tools
| Tool | Purpose | What it returns |
|---|---|---|
list_mounts | List all mounts in Vault | A list of mount paths and their configurations |
create_mount | Create a new KV mount (v1 or v2) in Vault | Confirmation of the mount creation |
delete_mount | Delete a specific mount from Vault | Confirmation of the mount deletion |
Example prompt: "Create a KV mount named "secrets" to store arbitrary secrets"