VeraCrypt MCP

Once a container is mounted, your MCP client (e.g. Claude Code) can read and edit the files inside it with its normal file tools. Say "mount my vault", work on the files, then "unmount my vault".

mcp-name: io.github.bitterdev/veracrypt-mcp

- mount_container: mount a VeraCrypt container (optional mount point, PIM, read-only)
- unmount_container: dismount by container path or mount point
- list_mounted_containers: show all mounted VeraCrypt volumes
- Default vault: configure your container once via environment variables; "mount my vault" then works without any arguments

The volume password isnever passed as a command line argument. Command line arguments are visible to every process on the machine (ps aux), so this server always pipes the password to VeraCrypt via stdin using VeraCrypt's official--stdinoption.

Store the password once in the OS keyring. The MCP tool then only receives a keyringaccount name, so the password never enters the LLM context, chat logs, or transcripts.

security add-generic-password -s veracrypt-mcp -a my-container -w # you will be prompted for the password interactively

Linux (libsecret / GNOME Keyring, requireslibsecret-tools):

secret-tool store --label="veracrypt-mcp my-container" service veracrypt-mcp account my-container

Then mount withkeychain_account: "my-container".

You can passpassworddirectly to the tool. It is still piped via stdin to VeraCrypt (never visible in the process list),but it passes through the LLM conversationand may be stored in chat logs. Use the keyring source whenever possible.

- Passwords are never logged and never included in tool results or error messages.
- Python cannot securely wipe strings from memory; for maximum security, use the keyring source and a dedicated container password.

pip install git+https://github.com/bitterdev/veracrypt-mcp.git

git clone https://github.com/bitterdev/veracrypt-mcp.git cd veracrypt-mcp pip install .

claude mcp add veracrypt -- veracrypt-mcp

claude mcp add veracrypt \ -e VERACRYPT_MCP_CONTAINER="/path/to/vault.hc" \ -e VERACRYPT_MCP_KEYCHAIN_ACCOUNT="my-vault" \ -- veracrypt-mcp

{ "mcpServers": { "veracrypt": { "command": "veracrypt-mcp", "env": { "VERACRYPT_MCP_CONTAINER": "/path/to/vault.hc", "VERACRYPT_MCP_KEYCHAIN_ACCOUNT": "my-vault" } } } }

Mount the container /Users/me/secret.hc using the keychain account "my-container"

Mount read-only at a specific mount point:

Mount /Users/me/secret.hc read-only at ~/mnt/secret, keychain account "my-container"

Parses various file formats using the 302.AI API, requiring a 302AI_API_KEY.

A local server that allows AI to execute Windows CMD commands, read/write files, and manage directories within a specified path.

Filesystem agent memory working with consolidation Daemon on your machine

An AI-powered MCP server for advanced file system operations, including search, comparison, and security analysis.

Securely browse and read files within an Android project, with built-in validation and access controls for sensitive directories.

Build a persistent, local knowledge base in Markdown files through conversations with LLMs.

A read-only MCP server for querying live FTP data using the CData JDBC Driver.

An MCP server for viewing, editing, and creating text files, based on the Claude built-in text editor tool.

Convert PDF, Word, Excel, PowerPoint, EPUB, HEIC and images from Claude or Cursor, with 35 converters exposed through just two MCP tools.