Encrypted credential vault for AI agents β auto OAuth refresh, rate limiting, audit logging.
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
π‘ Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows)
Secure credential management for Claude Desktop and MCP servers.
Or install globally:
Add the following to your Claude Desktop configuration file (claude_desktop_config.json):
| Variable | Required | Default | Description |
|---|---|---|---|
CLAVIS_API_KEY | yes | β | Your Clavis JWT, from POST /v1/auth/login. Not the cla_β¦ key shown at sign-up. |
CLAVIS_API_URL | no | https://clavisagent.com | Base URL of your Clavis instance. Set this for self-hosted deployments. |
| Tool | Description |
|---|---|
call_service | Recommended. Make an API call with server-side credential injection β the credential is injected into the upstream request server-side, so the raw key never enters the conversation. |
get_credentials | Legacy. Returns the raw access token or API key for a named service. Prefer call_service. |
list_services | List all services with stored credentials |
check_credential_status | Check the status and expiry of credentials for a service |
Prefer call_service over get_credentials. call_service keeps the secret
server-side, so a prompt injection has no credential in context to exfiltrate.
get_credentials places the raw key in the conversation and exists only for
callers that must hold the token themselves.
MIT
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/clavis)<a href="https://allmcps.com/mcp/clavis"><img src="https://allmcps.com/api/badge/clavis?style=directory" alt="Clavis on AllMCPs" /></a>