Can AI agents automate HashiCorp Vault?

HashiCorp · hybrid · identityenterprise

HashiCorp Vault is automatable today through its HTTP API. This record is the Vault secrets platform, including self-hosted Vault and HCP Vault Dedicated. It is not Terraform. The v1 API uses REST-like HTTP verbs under /v1/ and HashiCorp states it can control every aspect of Vault. After unseal, callers send a client token as X-Vault-Token or as Authorization Bearer. JSON request and response bodies are the documented interchange. Official clients are github.com/hashicorp/vault/api for Go and the vault Ruby gem; other language libraries on the libraries page are community-maintained. The vault CLI is a static binary that wraps the same API, with vault login or VAULT_TOKEN, stdin and @file input, and -format json|yaml|table|jsonx. The first-party Vault MCP Server (hashicorp/vault-mcp-server) speaks stdio and StreamableHTTP and exposes KV mount/secret tools plus PKI enable/issue/issuer/role tools, authenticated with a Vault token. HashiCorp marks that server Beta and strongly discourages production use; the repo limits it to trusted local networks. Opened Developer pages brand the product IBM Vault in places; the vendor on this record remains HashiCorp. Vault 1.15 and later is Business Source License 1.1, and Vault Enterprise uses separate commercial license keys. iPaaS connectors were not opened. Computer-use viability is unassessed. API and CLI both score 8; API is the best path because HashiCorp states the HTTP API is the complete control plane and the CLI itself consumes it. MCP scores 6 because it is a vendor Beta preview.

Best path today: api · Overall automatability: 8/10

Modalities

ModalityStatusDetail
APIyesrestvault-tokenbearer
coverage: full · docs
SDKyesgoruby
official: yes
MCPyes
verdict: official
Integrationsunknown
CLIyes
Extensibilityyesplugins
webhooks: unknown
Data access
export: json · import: json
RPA / UI automationunknownweb-dom
No repeatable UI probe was run. The Vault HTTP API, official vault CLI, and Vault MCP Server cover secrets, mounts, and PKI work without browser control.
Computer useunknown
measured verdicts only — "unknown" means not yet probed by us

Scores

apimcpintegrationsclirpacomputer useoverall
86—8——8

Evidence

FactTierSourceDate
homepagedeclaredsource2026-09-03
deploymentdeclaredsource2026-09-03
licensedeclaredsource2026-09-03
licensedeclaredsource2026-09-03
platformsdeclaredsource2026-09-03
modalities.api.existsdeclaredsource2026-09-03
modalities.api.kinds[0]declaredsource2026-09-03
modalities.api.auth[0]declaredsource2026-09-03
modalities.api.auth[1]declaredsource2026-09-03
modalities.api.coveragedeclaredsource2026-09-03
modalities.sdk.existsdeclaredsource2026-09-03
modalities.sdk.languages[0]declaredsource2026-09-03
modalities.sdk.languages[1]declaredsource2026-09-03
modalities.mcp.first_partydeclaredsource2026-09-03
modalities.cli.existsdeclaredsource2026-09-03
modalities.extensibility.scripting[0]declaredsource2026-09-03
modalities.data_access.export[0]declaredsource2026-09-03
modalities.data_access.import[0]declaredsource2026-09-03
modalities.agent_docs.llms_txtscrapedsource2026-09-03
verdict.scores.apideclaredsource2026-09-03
verdict.scores.mcpdeclaredsource2026-09-03
verdict.scores.clideclaredsource2026-09-03
freshness.watch[0].urldeclaredsource2026-09-03
freshness.watch[1].urldeclaredsource2026-09-03
freshness.watch[2].urldeclaredsource2026-09-03
freshness.watch[3].urldeclaredsource2026-09-03

Related tools

Other products in this database that share a category with HashiCorp Vault.

Last verified 2026-09-03 · volatility high · JSON record