What it is
A single-user, read-only MCP server that lets you search a private repo of your most sensitive documents from the Claude and ChatGPT apps — without handing the whole repo, or any credential, to the AI provider.
Vault MCP
Ask your own medical, financial, and personal records from the Claude or ChatGPT app — exposed to no one but you.
Read the introduction What needs your input See the roadmap
How it works
A thin Cloudflare Worker exposes exactly two tools, search and fetch,
backed by Cloudflare AI Search over your encrypted docs. OAuth + Cloudflare
Access lock it to you alone. No write tools, no outbound calls.
Start here
Section titled “Start here” Introduction What it is and the problem it solves.
How it works The request flow and the trust boundary, end to end.
What needs your input The decisions and credentials only you can provide.
Security model Why read-only + no-exfil breaks the lethal trifecta.