Back to Browse

Hive Mcp Vault MCP Server

SecurityLow Risk9.1MCP RegistryRemote
Free

Server data from the Official MCP Registry

A2A ZK wallet recovery — guardian swarm, no seed phrase, HiveLaw enforcement

About

A2A ZK wallet recovery — guardian swarm, no seed phrase, HiveLaw enforcement

Remote endpoints: streamable-http: https://hive-mcp-vault.onrender.com/mcp

Security Report

9.1
Low Risk9.1Low Risk

Valid MCP server (1 strong, 1 medium validity signals). 3 known CVEs in dependencies Imported from the Official MCP Registry.

8 tools verified · Open access · 3 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "io-github-srotzin-hive-mcp-vault": {
      "url": "https://hive-mcp-vault.onrender.com/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

hive-mcp-vault

srotzin/hive-mcp-vault MCP server

MCP access to confirmed HiveVault FENR reads and an AES-256-GCM encrypted item store.

Live contract

The server exposes four read-only MCP tools backed by the live HiveVault service:

ToolLive backend route
vault.balanceGET /vault/balance
vault.statsGET /vault/stats
vault.identityGET /vault/identity
vault.quantum_pubkeyGET /vault/quantum/pubkey

vault.balance returns the backend response exactly as received. An unauthenticated response can be marked obfuscated: true; clients must not treat that value as a confirmed treasury balance.

The server also exposes an encrypted item store:

MethodPathDescription
POST/v1/vault/storeStore an AES-256-GCM encrypted item after the x402 gate
GET/v1/vault/store/:item_refConfirm a stored item exists without returning plaintext

Unknown paths return HTTP 404. Upstream failures return explicit MCP errors. The service does not return fabricated success payloads.

Discovery and health

MethodPathDescription
GET/healthReadiness. This process plus current upstream reachability. Returns 503 and degraded when the upstream is unreachable
GET/livezLiveness only. This process, no upstream claim. This is the path platform health checks should use
POST/mcpMCP JSON-RPC 2.0, protocol 2024-11-05
GET/.well-known/mcp.jsonMCP discovery manifest
GET/.well-known/agent-card.jsonA2A agent card
GET/.well-known/agent.jsonAgent card
GET/.well-known/oac.jsonOpen Agent Card JSON-LD
GET/llms.txtPlain-text integration guide

Persistence

Set BOGO_DB_PATH to a path on durable storage in production. The default path, /tmp/bogo_vault.db, is suitable only for local development and tests. The server refuses to start in production unless an explicit database path is configured.

Environment variables

VariableRequiredPurpose
PORTNo, default 3000HTTP port
VAULT_BACKEND_URLNo, default https://hive-vault.onrender.comLive HiveVault backend
INTERNAL_KEYYes in productionDerives the local encryption key and is sent to the backend as x-vault-key
BOGO_DB_PATHYes in productionSQLite database path on durable storage. Local development defaults to /tmp/bogo_vault.db
BASE_RPC_URLNo, default https://mainnet.base.orgBase RPC endpoint used for x402 payment verification

The server refuses to start with NODE_ENV=production if INTERNAL_KEY or BOGO_DB_PATH is missing.

Testing

npm install
npm test

Tests cover health reporting, unknown-route handling, MCP tool discovery, upstream failure behavior, encrypted storage, and plaintext absence from the SQLite file.

Brand

Hive Civilization. Brand gold #C08D23. Steve Rotzin.

Directory

Reviews

No reviews yet

Be the first to review this server!