How do I install Clavis?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Clavis need an API key?

No required environment variable is listed on this record.

What transport does Clavis use?

Clavis runs locally over stdio.

Clavis

by io.github.KN0WBOT

Encrypted credential vault for AI agents — auto OAuth refresh, rate limiting, audit logging.

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Local command

npx -y @clavisagent/[email protected]

Provider

Claude Code

claude mcp add io.github.kn0wbot-clavis -- npx -y @clavisagent/[email protected]

Run in a terminal.

Claude Desktop

{
  "mcpServers": {
    "io.github.kn0wbot-clavis": {
      "command": "npx",
      "args": [
        "-y",
        "@clavisagent/[email protected]"
      ]
    }
  }
}

claude_desktop_config.json

Step-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Related MCP

Related skills

View all

Questions

How do I install Clavis?: Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.
Does Clavis need an API key?: No required environment variable is listed on this record.
What transport does Clavis use?: Clavis runs locally over stdio.
When was Clavis last checked?: Last checked 2026-10-16. Encrypted credential vault for AI agents — auto OAuth refresh, rate limiting, audit logging.

Clavis MCP Server

Secure credential management for Claude Desktop and MCP servers.

Features

🔐 Encrypted credential storage (AES-128-CBC + HMAC-SHA256, via Fernet)
🛡️ Server-side credential injection — the raw key never enters the conversation
🔄 Automatic OAuth token refresh
📡 Thin forwarding layer — rate limiting, audit logging, and usage tracking are all handled by the Clavis server

Installation

npx @clavisagent/mcp-server

Or install globally:

npm install -g @clavisagent/mcp-server

Usage with Claude Desktop

Add the following to your Claude Desktop configuration file (claude_desktop_config.json):

{
  "mcpServers": {
    "clavis": {
      "command": "npx",
      "args": ["-y", "@clavisagent/mcp-server"],
      "env": {
        "CLAVIS_API_KEY": "eyJ..."
      }
    }
  }
}

Usage with Claude Code

claude mcp add clavis -- npx -y @clavisagent/mcp-server

Configuration

Variable	Required	Default	Description
`CLAVIS_API_KEY`	yes	—	Your Clavis JWT, from `POST /v1/auth/login`. Not the `cla_…` key shown at sign-up.
`CLAVIS_API_URL`	no	`https://clavisagent.com`	Base URL of your Clavis instance. Set this for self-hosted deployments.

Available Tools

Tool	Description
`call_service`	Recommended. Make an API call with server-side credential injection — the credential is injected into the upstream request server-side, so the raw key never enters the conversation.
`get_credentials`	Legacy. Returns the raw access token or API key for a named service. Prefer `call_service`.
`list_services`	List all services with stored credentials
`check_credential_status`	Check the status and expiry of credentials for a service

Security note

Prefer call_service over get_credentials. call_service keeps the secret server-side, so a prompt injection has no credential in context to exfiltrate. get_credentials places the raw key in the conversation and exists only for callers that must hold the token themselves.

License

MIT