SanctumAI — Credential Vault for AI Agents

Official

by jwgale

Credential vault for AI agents — encrypted storage, lease-based access, CRP support.

Encrypted credential vault for AI agents with lease-based access control.

Install

Configuration

Environment variables

SANCTUM_VAULT_PATH

Path to the SanctumAI vault directory. Defaults to ~/.sanctum

SANCTUM_PASSPHRASEsecret

Vault passphrase for automated/headless operation. If not set, the vault must be unlocked interactively or via the web UI.

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "sanctum": {
      "command": "npx",
      "args": [
        "-y",
        "@sanctumai/mcp-server@0.3.2"
      ],
      "env": {
        "SANCTUM_VAULT_PATH": "<YOUR_SANCTUM_VAULT_PATH>",
        "SANCTUM_PASSPHRASE": "<YOUR_SANCTUM_PASSPHRASE>"
      }
    }
  }
}