@vaulttools/mcp

Full documentation available at vault-tools.com/mcp

56 tools to convert, compress, merge, and transform files locally. Predictable outputs, path-based I/O, zero network calls. For AI agents via the Model Context Protocol.

Why VaultTools MCP?

Filesystem MCP reads and writes files. VaultTools transforms them, including format conversion, compression, merging, metadata extraction, and more, without file bytes ever entering the AI conversation. Only file paths are exchanged. Directory sandboxing ensures the server only accesses what you allow.

Quick Setup

Auto-configure VaultTools in your AI tools with a single command:

npx @vaulttools/mcp init

Interactive prompt lets you pick which tools to configure. Supports Claude Code, Claude Desktop, Cursor, Windsurf, Antigravity, Cline, VS Code (Copilot), Codex, OpenCode, and Zed.

Non-interactive usage:

npx @vaulttools/mcp init --tool cursor                  # Configure a single tool
npx @vaulttools/mcp init --tool claude-code --dir ~/Desktop  # Custom directory
npx @vaulttools/mcp init --all                           # Configure all detected tools
npx @vaulttools/mcp init --all --dir ~/Desktop           # All tools, custom directory
npx @vaulttools/mcp init --help                          # Show all options

The --dir flag sets the --allowed-dir for global tools (Claude Code, Claude Desktop, Cline, Codex). Project-local tools (Cursor, Windsurf, VS Code, etc.) always use the current directory. In interactive mode, you'll be prompted to choose a directory.

Install

npx @vaulttools/mcp --allowed-dir /path/to/your/files

No global install needed. npx downloads the correct binary for your platform automatically.

Configure (manual)

Claude Code

Add to ~/.claude.json:

{
  "mcpServers": {
    "vaulttools": {
      "command": "npx",
      "args": ["-y", "@vaulttools/mcp", "--allowed-dir", "/path/to/your/files"]
    }
  }
}

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "vaulttools": {
      "command": "npx",
      "args": ["-y", "@vaulttools/mcp", "--allowed-dir", "/path/to/your/files"]
    }
  }
}

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "vaulttools": {
      "command": "npx",
      "args": ["-y", "@vaulttools/mcp", "--allowed-dir", "."]
    }
  }
}

Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "vaulttools": {
      "command": "npx",
      "args": ["-y", "@vaulttools/mcp", "--allowed-dir", "."]
    }
  }
}

Available Tools (51)

Image Tools

• Image convert (format conversion between PNG, JPG, WebP, BMP, TIFF, AVIF)
• Image compress (quality-controlled size reduction)
• Image resize (with aspect ratio lock)
• Image info (dimensions, format, file size)
• EXIF read and strip (view/remove metadata)
• Image to Base64 (data URI encoding)
• Image transform (rotate, flip, crop)
• Color palette extraction
• Favicon generation (multi-size package)
• Screenshot mockup frames (browser/phone)
• SVG to PNG rasterization
• HEIC to JPG/PNG/WebP conversion
• Text watermarking

PDF Tools

• Merge multiple PDFs
• Split PDF by page range
• Images to PDF
• Organize (reorder/rotate pages)
• Metadata editing
• Compress PDF
• PDF to images (per-page extraction)
• Page numbers and watermark

Text & Data Tools

• JSON format/validate/minify
• CSV to JSON and JSON to CSV
• Base64 encode/decode
• Markdown to HTML
• HTML to Markdown
• Text diff
• Regex testing and replacement
• YAML/JSON/TOML conversion
• XML to JSON
• HTML entity encode/decode
• Word count

Developer Tools

• Hash generation (SHA-1, SHA-256, SHA-512)
• Color conversion (HEX, RGB, HSL)
• URL encode/decode (full URL or component mode)
• QR code generation and reading
• UUID generation
• JWT decoding
• Cron expression parsing
• Lorem ipsum generation
• Timestamp conversion (seconds or milliseconds)

File Tools

• File checksum (MD5, SHA-1, SHA-256, SHA-512)
• TSV/CSV conversion
• CSV viewing/editing
• ZIP compress and extract

Options

| Flag | Description | Default | |------|-------------|---------| | --allowed-dir <path> | Directory the server can read from (required, repeatable) | none | | --output-dir <path> | Directory for output files | allowed-dir | | --verbose | Enable verbose logging to stderr | off |

Privacy

The VaultTools MCP server is designed for privacy:

• Local processing. All file operations run on your machine. No files are uploaded anywhere.
• Path-based I/O. The AI agent sends file paths, not file bytes. Processed results are written to disk, not returned in conversation.
• Directory sandboxing. --allowed-dir restricts which directories the server can access.
• No telemetry. Zero analytics, no network requests during processing.

Disclaimer

The VaultTools MCP server is designed so that file bytes stay on your machine and never enter the AI conversation. Some tools return extracted metadata (EXIF tags, checksums, word counts) by design. Only file paths and metadata are exchanged with the model.

However, the AI model that calls these tools operates independently of VaultTools. The model may choose to read, log, or transmit tool outputs according to its own behavior and the policies of its provider. VaultTools has no control over what the model does with the results once they are returned.

By using the MCP server, you acknowledge that VaultTools is not responsible for how the connected AI model handles tool responses. If you are processing sensitive files, review the privacy policies of your AI provider.

Links

• Documentation
• Quickstart Guide
• Tool Reference (API docs)
• Safety Model
• Browser tools

License

MIT