Encrypted credential vault for AI agents β auto OAuth refresh, rate limiting, audit logging.
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag β we're steadily working through the catalog.
π‘ Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
Inspect callable tools, capabilities, and parameters exposed to AI agents by Clavis.
call_serviceRecommended.** Make an API call with server-side credential injection β the credential is injected into the upstream request server-side, so the raw key never enters the conversation.
get_credentialsLegacy. Returns the raw access token or API key for a named service. Prefer `call_service`.
list_servicesList all services with stored credentials
check_credential_statusCheck the status and expiry of credentials for a service
Secure credential management for Claude Desktop and MCP servers.
Or install globally:
Add the following to your Claude Desktop configuration file (claude_desktop_config.json):
| Variable | Required | Default | Description |
|---|---|---|---|
CLAVIS_API_KEY | yes | β | Your Clavis JWT, from POST /v1/auth/login. Not the cla_β¦ key shown at sign-up. |
CLAVIS_API_URL | no | https://clavisagent.com | Base URL of your Clavis instance. Set this for self-hosted deployments. |
| Tool | Description |
|---|---|
call_service | Recommended. Make an API call with server-side credential injection β the credential is injected into the upstream request server-side, so the raw key never enters the conversation. |
get_credentials | Legacy. Returns the raw access token or API key for a named service. Prefer call_service. |
list_services | List all services with stored credentials |
check_credential_status | Check the status and expiry of credentials for a service |
Prefer call_service over get_credentials. call_service keeps the secret
server-side, so a prompt injection has no credential in context to exfiltrate.
get_credentials places the raw key in the conversation and exists only for
callers that must hold the token themselves.
MIT
Factual signals from GitHub, npm, and our automated checks β not a rating.
No reviews yet β be the first to share how this listing worked for you.
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/clavis)<a href="https://allmcps.com/mcp/clavis"><img src="https://allmcps.com/api/badge/clavis?style=directory" alt="Clavis on AllMCPs" /></a>