Astrix MCP Secret Wrapper: Open-Source Vault-Based Dynamic Credential Injection Eliminates Static Secrets in MCP Servers

GitHub·medium signal

Astrix released MCP Secret Wrapper (Apache 2.0, npm + GitHub), which wraps any MCP server to pull credentials from AWS Secrets Manager at runtime instead of hardcoding them in config files. Given that 53% of MCP servers rely on insecure long-lived static secrets, this tool enables vault-based auto-rotation without touching MCP server code. Two-step setup: install the wrapper, point it at your vault, and your MCP server gets secrets injected as environment variables.