vaultguard for VS Code
io.github.ashishrao-4/vaultguard
AI agents use your Obsidian secrets by name — values never reach their context.
client:VS Code
transport:stdio
runtime:npm
Install vaultguard in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "vaultguard-passphrase",
"description": "VAULTGUARD_PASSPHRASE",
"password": true
},
{
"type": "promptString",
"id": "vaultguard-vault-path",
"description": "VAULTGUARD_VAULT_PATH",
"password": true
},
{
"type": "promptString",
"id": "vaultguard-home",
"description": "VAULTGUARD_HOME",
"password": true
},
{
"type": "promptString",
"id": "vaultguard-allow-get-secret",
"description": "VAULTGUARD_ALLOW_GET_SECRET",
"password": true
}
],
"servers": {
"vaultguard": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@ashishrao-4/vaultguard"
],
"env": {
"VAULTGUARD_PASSPHRASE": "${input:vaultguard-passphrase}",
"VAULTGUARD_VAULT_PATH": "${input:vaultguard-vault-path}",
"VAULTGUARD_HOME": "${input:vaultguard-home}",
"VAULTGUARD_ALLOW_GET_SECRET": "${input:vaultguard-allow-get-secret}"
}
}
}
}
VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs