oci-secrets-mcp

Item: oci-secrets-mcp
Rating: 71
Author: M8ven

MCP server for Oracle Cloud Infrastructure Vault secrets, enabling secret retrieval, listing, creation, updates, deletion, and rotation with OCI authentication.

→ kevinwengh/oci-secrets-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configOCI_CONFIG_FILE— api_key (default) ~/.oci/config, optionally and OCI_CONFIG_PROFILE

configOCI_CONFIG_PROFILE— api_key (default) ~/.oci/config, optionally OCI_CONFIG_FILE and

configOCI_REGION— instance_principal and an OCI compute instance principal

configOCI_SECRETS_MCP_AUTH_MODE— Select a non-default provider with .

configOCI_DELEGATION_TOKEN_FILE— instance_principal_delegation_token OCI_REGION and

configMCP_TRANSPORT

configMCP_HOST

configMCP_PORT

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/kevinwengh-oci-secrets-mcp-1l3on9)](https://m8ven.ai/mcp/kevinwengh-oci-secrets-mcp-1l3on9)

commit: 3effd118d071e723d4ee74a119ccc3d959070de3

code hash: 3e6b9220c51ba1dbfa120c15e7a0a36254af3ded0a9fc3428cea38518b3d7887

verified: 7/28/2026, 8:59:14 AM

view raw JSON →