How Wix scaled AI-native work to 5,000 employees with Willow
Read More
Enterprise Connectors
Akeyless logo. Akeyless MCP server connector.

Akeyless MCP Server

Akeyless is a secrets management and machine identity platform with zero-knowledge encryption. Manage static, dynamic, and rotated secrets, targets, folders, roles, and authentication methods through your Akeyless Gateway or the Akeyless SaaS API.

ToolsTools
28
CategoryCategory
Identity & Security
Install with Willow
Claude
Install
✓Enterprise-grade security
✓SSO & authentication ready
✓Full governance & audit logs

What is the Akeyless MCP Server?

The Akeyless MCP server gives AI agents structured, permission-aware access to Akeyless through the Model Context Protocol. With 28 pre-built actions, agents can read, create, and update Akeyless data on behalf of authorized users.

Willow ships the Akeyless MCP server as part of an enterprise control plane. Every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to a full audit trail, and integrates with Splunk and Loki for SIEM visibility. Connect from Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, or any custom agent. Install once, distribute org-wide, and see exactly how Akeyless is being used by every AI agent in your stack.

Tools

Tool

List Items

List secrets, keys, and other vault items accessible to the authenticated identity. Filter by folder path, item type, name substring, or tag. Use this first to discover what exists before reading or updating a specific item.
Tool

Describe Item

Get metadata for a vault item by name — type, description, tags, protection key, versions, and gateway associations. Does not return secret values; use Get Secret Value for that.
Tool

Get Secret Value

Read the value of one or more static secrets by path. Returns decrypted secret material — use only when the agent needs the actual credential or configuration string.
Tool

Create Static Secret

Create a new static secret at the given path with a text or JSON value. Use for storing API keys, passwords, or configuration blobs that agents or applications will retrieve later.
Tool

Update Secret Value

Update the value of an existing static secret, creating a new version when versioning is enabled on the item.
Tool

Update Item

Update item metadata — rename, change description, add or remove tags, or adjust max versions. Does not change the secret value; use Update Secret Value for that.
Tool

Delete Item

Delete a vault item and optionally all its versions. For keys, you can schedule deferred deletion instead of immediate removal.
Tool

Get Item Tags

List all tags attached to a vault item. Useful before adding tags or auditing classification.
Tool

Set Item State

Enable or disable a vault item without deleting it. Disabled items cannot be read or updated until re-enabled.
Tool

Get Dynamic Secret Value

Generate just-in-time credentials from a dynamic secret producer (database, cloud, SSH, etc.). Returns temporary credentials scoped to the producer configuration.
1–10 of 28 tools
Customize tools

Customize Tools

Edit descriptions, modify arguments, select tools, or add new ones

ReviewEdit descriptions
ConfigureChange arguments
ApproveSelect tools
Create NewAdd tool

Set Up Your Akeyless MCP Server in Minutes

Add the following configuration to your MCP client. Authentication is handled via OAuth. Compatible with Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, and any MCP-compatible agent.

Claude Desktop

claude_desktop_config.json
{
  "mcpServers": {
    "willow-akeyless": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/akeyless"
    }
  }
}

Cursor

.cursor/mcp.json
{
  "mcpServers": {
    "willow-akeyless": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/akeyless"
    }
  }
}

Claude Code

CLI
claude mcp add willow-akeyless --transport http https://<org>.mcp-s.com/mcp/mcp/akeyless

n8n

HTTP Request Node
{
  "url": "https://<org>.mcp-s.com/mcp/mcp/akeyless",
  "method": "POST"
}

Or click "Install with Willow" above to set up automatically with SSO and RBAC preconfigured.

Enterprise Governance for Akeyless

Willow adds the layer Akeyless and every other SaaS doesn't ship out of the box: every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to full audit logs, and detects shadow AI usage across your stack. One MCP gateway. Any agent. Every tool.

Akeyless MCP Server FAQ

What is the Akeyless MCP server?

The Akeyless MCP server is a Model Context Protocol implementation that lets AI agents like Claude, Cursor, and ChatGPT read and write Akeyless data through a standardized interface. Willow hosts and governs this server so enterprises can roll it out without a security review backlog.

How is Willow's Akeyless MCP server different from the official one?

The official Akeyless MCP server is scoped to a single user's account and does not include enterprise governance. Willow's version adds SSO, RBAC, audit logging, shadow AI detection, and centralized control over which actions agents can take across the entire org.

Which AI clients work with the Akeyless MCP server?

Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code with MCP support, n8n, and any custom agent built with OpenAI Agents SDK, LangChain, Vercel AI SDK, or Anthropic SDK.

Is the Akeyless MCP server secure? How does Willow handle authentication?

Every call runs behind your existing SSO (Okta, Azure AD). Per-user OAuth scopes the agent to exactly what that user can do in Akeyless, nothing more. No credentials reach the LLM. Every action writes to an audit trail.

Can I limit which Akeyless actions agents can take?

Yes. Willow lets you scope agents to specific actions, specific projects, or specific environments. Toggle actions on or off in the dashboard, or enforce policy via infrastructure-as-code through GitHub.

How do I detect shadow Akeyless MCP servers in my org?

Willow's browser extension and discovery service surface unmanaged MCP servers, skills, and AI agents across the org. If a developer installed an unapproved Akeyless MCP locally, you'll see it.

What does the Akeyless MCP server cost?

Pricing depends on org size and deployment model (SaaS, dedicated cloud, self-host). See withwillow.ai/pricing or contact sales for a quote.

How do I install the Akeyless MCP server with Willow?

Install via the Willow Connect Panel in one click, or paste the JSON snippet above into your Claude Desktop, Cursor, or Claude Code config. SSO and RBAC inherit from your existing Willow setup.

Compare Willow MCP Gateway

See how Willow stacks up against other MCP platforms on governance, security, and enterprise readiness.

Willow vs ArchestraWillow vs CloudflareWillow vs MetaMCPWillow vs ObotWillow vs MintMCPWillow vs Runlayer

Related identity-security MCP Servers

Google Workspace Admin logo. Google Workspace Admin MCP server connector.

Google Workspace Admin

verified

Google Workspace Admin MCP server. Governed enterprise integration.

Notion SCIM Admin logo. Notion SCIM Admin MCP server connector.

Notion SCIM Admin

verified

Notion SCIM Admin MCP server. Governed enterprise integration.

Wiz logo. Wiz MCP server connector.

Wiz

verified

Wiz MCP server. Governed enterprise integration.

Cycode logo. Cycode MCP server connector.

Cycode

verified

Cycode MCP server. Governed enterprise integration.

Your agents are already in the wild.

Give them a Basecamp. Go from AI chaos to AI work, in minutes.

Get Started
Get started
Book a Demo