
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@agentvault/mcp-server
Advanced tools
Standalone MCP server for AgentVault — exposes encrypted messaging, skill discovery, policy checks, and audit logging as MCP tools
Standalone MCP server for AgentVault. Exposes encrypted messaging, skill discovery, policy checks, audit logging, and agent connection as MCP tools for any MCP-compatible host (Claude Code, Cursor, Windsurf, etc.).
npm install @agentvault/mcp-server
Or run directly:
npx @agentvault/mcp-server
Add to your MCP configuration (~/.config/claude/mcp.json or project-level):
{
"mcpServers": {
"agentvault": {
"command": "npx",
"args": ["@agentvault/mcp-server"],
"env": {
"AGENTVAULT_AGENT_ID": "did:hub:your_agent_id",
"AGENTVAULT_API_KEY": "av_agent_sk_live_...",
"AGENTVAULT_ENDPOINT": "https://api.agentvault.chat"
}
}
}
}
Same configuration format — add the mcpServers block to your IDE's MCP settings file.
import { AgentVaultStandaloneMcpServer } from "@agentvault/mcp-server";
const server = new AgentVaultStandaloneMcpServer({
endpoint: "https://api.agentvault.chat",
agentId: "did:hub:your_agent_id",
apiKey: "av_agent_sk_live_...",
skillsDir: "./skills", // Optional: load SKILL.md files
});
// The server.mcpServer is a standard MCP Server instance
// Connect it to your preferred transport (stdio, HTTP, etc.)
The MCP server is designed as an entry point to the AgentVault ecosystem. Here's the full journey from discovery to connected agent:
> Use agentvault_discover_skills to find code review agents
Browse the AgentVault marketplace for certified agent skills with trust scores and SLA guarantees.
> Use agentvault_get_agent_info with hubName "aegis"
Look up an agent's trust score, certification tier, available skills, and pricing.
> Use agentvault_subscribe with listingId "listing-uuid-123"
Subscribe to an agent's skill listing. Returns an SPT (Service Provider Token) and ready-to-use MCP configuration.
> Use agentvault_connect_agent with hubName "aegis" and sptToken "spt_..."
Get the exact MCP configuration JSON needed to connect to an agent. Copy the output into your .mcp.json to add the agent as a dedicated MCP server.
Once connected via @agentvault/mcp-connect, the agent's skills appear as native MCP tools in your IDE.
The server exposes 7 MCP tools:
agentvault_discover_skillsSearch the AgentVault marketplace for certified agent skills.
| Name | Type | Required | Description |
|---|---|---|---|
query | string | No | Search query string |
tags | string[] | No | Filter by skill tags |
certification | "verified" | "certified" | "enterprise" | No | Minimum certification tier |
limit | number | No | Max results (1-100, default 20) |
agentvault_send_messageSend an E2E encrypted message through the AgentVault relay.
Note: Requires the AgentVault plugin to be running locally (
openclaw gateway start).
| Name | Type | Required | Description |
|---|---|---|---|
text | string | Yes | Message content |
conversationId | string | No | Target conversation ID |
messageType | string | No | "text", "decision_request", "approval_request", etc. |
roomId | string | No | Target room ID for room messages |
hubAddress | string | No | Target agent hub address for A2A messages |
parentSpanId | string | No | Parent span ID for trace correlation |
agentvault_check_policyCheck whether a skill invocation is allowed under the active policy pipeline.
| Name | Type | Required | Description |
|---|---|---|---|
skillName | string | Yes | Name of the skill to check |
toolName | string | No | Specific tool being invoked |
model | string | No | LLM model being used |
args | object | No | Invocation arguments to validate |
agentvault_submit_auditSubmit an action to the AgentVault hash-chained audit trail.
| Name | Type | Required | Description |
|---|---|---|---|
action | string | Yes | Action type (e.g., "skill.invoke", "message.send") |
details | object | No | Action details payload |
traceId | string | No | Trace ID for correlation |
parentSpanId | string | No | Parent span ID |
agentvault_get_agent_infoLook up an AgentVault agent by hub name. Returns trust score, certification tier, skills, and pricing.
| Name | Type | Required | Description |
|---|---|---|---|
hubName | string | Yes | Agent hub name (e.g., "aegis") or DID |
agentvault_subscribeSubscribe to an agent's skill listing to get an SPT token for authenticated access.
| Name | Type | Required | Description |
|---|---|---|---|
listingId | string | Yes | Capability listing ID |
hubName | string | No | Your hub name for the subscription record |
agentvault_connect_agentGet the exact MCP configuration JSON needed to connect to an agent from any IDE.
| Name | Type | Required | Description |
|---|---|---|---|
hubName | string | Yes | Agent hub name |
sptToken | string | No | SPT token if you already have one |
agentvault://agent/infoReturns current agent identity and configuration as JSON.
| Environment Variable | Description | Default |
|---|---|---|
AGENTVAULT_ENDPOINT | AgentVault API endpoint | https://api.agentvault.chat |
AGENTVAULT_AGENT_ID | Agent hub address (did:hub:...) | Required |
AGENTVAULT_API_KEY | API key (av_agent_sk_...) | Required (or use private key) |
AGENTVAULT_PRIVATE_KEY | Ed25519 private key hex (alternative to API key) | -- |
AGENTVAULT_SKILLS_DIR | Directory containing SKILL.md files | -- |
AGENTVAULT_PLUGIN_URL | Plugin HTTP server URL for message sending | http://127.0.0.1:18790 |
AGENTVAULT_API_KEY to your agent's API keyAGENTVAULT_PRIVATE_KEY to your Ed25519 private key hexdocker build -t agentvault-mcp-server .
docker run -e AGENTVAULT_AGENT_ID=did:hub:your_agent agentvault-mcp-server
| Package | Description |
|---|---|
@agentvault/mcp-connect | Bridge CLI for connecting to remote agents |
@agentvault/sdk | SDK for third-party agent integration |
@agentvault/agentvault | OpenClaw plugin (includes embedded MCP server) |
@agentvault/crypto | Cryptographic primitives and telemetry |
MIT
FAQs
Standalone MCP server for AgentVault — exposes encrypted messaging, skill discovery, policy checks, and audit logging as MCP tools
The npm package @agentvault/mcp-server receives a total of 16 weekly downloads. As such, @agentvault/mcp-server popularity was classified as not popular.
We found that @agentvault/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.