Wundervault MCP Context Server

MCP server for securing AI agent context files (SOUL.md, AGENTS.md, MEMORY.md, etc.) in an encrypted vault bundle.

What It Does

• load_context_bundle: Load all agent context files from the vault at session start
• update_context_file: Encrypt and push updated context files back to the vault

Content is encrypted client-side — the vault server never sees plaintext.

Install

Since this is not published to npm yet, install locally:

cd /path/to/wundervault-mcp-context
npm install
npm run build
# Link or use directly

Or reference in your .mcp.json:

{
  "mcpServers": {
    "wundervault-context": {
      "command": "node",
      "args": ["/path/to/wundervault-mcp-context/dist/index.js"],
      "env": {
        "WUNDERVAULT_AGENT_VAULT_API_KEY": "your-api-key",
        "WUNDERVAULT_AGENT_ENCRYPTION_KEY": "your-enc-key",
        "WUNDERVAULT_BUNDLE_KEY": "your-bundle-key"
      }
    }
  }
}

Credentials File

Create ~/.wundervault/context-creds.json:

{
  "agent_vault_url": "https://wundervault.com",
  "agent_vault_api_key": "your-api-key",
  "agent_encryption_key": "your-encryption-key-base64",
  "bundle_key": "your-bundle-encryption-key-base64"
}

Available Tools

| Tool | Description | |------|-------------| | load_context_bundle | Load all context files from the vault at session start | | update_context_file | Encrypt and push an updated file to the vault |

Security

All content is encrypted client-side using AES-256-GCM with your bundle key before leaving this process.

The vault server only ever sees encrypted blobs — never your plaintext context.