🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@vallt/mcp-server

Package Overview
Dependencies
Maintainers
1
Versions
37
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@vallt/mcp-server

Vallt MCP server — integration co-pilot for Claude Code

latest
npmnpm
Version
0.0.37
Version published
Maintainers
1
Created
Source

Vallt — Integration Co-pilot for Claude Code

Vallt is an MCP server that manages API credentials for vibe coders. It connects your services (Stripe, Supabase, OpenAI, etc.), stores keys securely in your OS keychain, monitors health, and injects env vars — all without ever pasting a key into chat.

Install

npx @vallt/mcp-server

That's it. The setup script detects Claude Code, Cursor, or Windsurf and registers itself automatically.

Activate

Get your token at vallt.works/connect (takes 20 seconds), then run:

claude -p "set up my Vallt token: vlt_YOUR_TOKEN_HERE"

What it does

  • Connect integrations"connect Stripe" triggers a secure key entry flow via a one-time link. Your key goes straight to the keychain, never through chat.
  • Import existing keys"sync my env to Vallt" scans your .env files and imports everything automatically.
  • Health monitoringvlt_health_check re-validates all connected services and flags broken tokens.
  • Inject env vars — push secrets to Vercel, Fly.io, or .env.local on demand.

Supported integrations (40+)

Stripe, Supabase, Clerk, Auth0, OpenAI, Anthropic, Replicate, ElevenLabs, Groq, Together AI, Resend, SendGrid, Twilio, Loops, Vercel, Cloudflare, GitHub, Netlify, Pusher, UploadThing, Cloudinary, Upstash, Pinecone, Neon, Firebase, PostHog, Sentry, Lemon Squeezy, Shopify, Plaid, Polygon.io, Public.com, Discord, Apple, Google, and more.

Pricing

  • Free — 2 integrations
  • Solo — $5/mo · unlimited integrations
  • Studio — $20/mo · unlimited everything + team vault

Security

Keys are encrypted at rest and stored in your local OS keychain (macOS Keychain / Windows Credential Manager / libsecret on Linux). Raw key values are never logged, never sent to chat, and never stored in plaintext.

vallt.works · Dashboard · Support

FAQs

Package last updated on 19 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts