# ShieldFive MCP server

> Lets AI clients manage end-to-end encrypted vaults and local folders for file organization, duplicate finding, and secure uploads.

- Repository: https://github.com/shieldfive/mcp
- Page: https://hostedmcp.org/servers/shieldfive/mcp
- Transport: stdio
- Stars: 0
- License: MIT
- Latest version: 0.7.1

## Install

### Claude Code

```sh
claude mcp add --env SHIELDFIVE_GRANT=<YOUR_SHIELDFIVE_GRANT> mcp -- npx -y @shieldfive/mcp
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@shieldfive/mcp"
      ],
      "env": {
        "SHIELDFIVE_GRANT": "<YOUR_SHIELDFIVE_GRANT>"
      }
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@shieldfive/mcp"
      ],
      "env": {
        "SHIELDFIVE_GRANT": "<YOUR_SHIELDFIVE_GRANT>"
      }
    }
  }
}
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@shieldfive/mcp"
      ],
      "env": {
        "SHIELDFIVE_GRANT": "<YOUR_SHIELDFIVE_GRANT>"
      }
    }
  }
}
```

### Codex (`~/.codex/config.toml`)

```toml
[mcp_servers.mcp]
command = "npx"
args = ["-y", "@shieldfive/mcp"]

[mcp_servers.mcp.env]
SHIELDFIVE_GRANT = "<YOUR_SHIELDFIVE_GRANT>"
```

### Gemini CLI (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@shieldfive/mcp"
      ],
      "env": {
        "SHIELDFIVE_GRANT": "<YOUR_SHIELDFIVE_GRANT>"
      }
    }
  }
}
```

## Environment variables

| Name | Required | Secret | Description |
|---|---|---|---|
| `SHIELDFIVE_GRANT` | no | yes | Connection string from ShieldFive → Settings → AI assistants. Optional: `npx @shieldfive/mcp login` stores it in the OS keychain instead. |
| `SHIELDFIVE_MCP_ROOTS` | no | no | Local directories the local tools may use, separated by the platform path separator. Optional. |

## Tools (21)

- `vault_connect`
- `vault_list_files`
- `vault_search_files`
- `vault_storage_stats`
- `vault_find_duplicates`
- `vault_read_file`
- `vault_rename`
- `vault_move`
- `vault_create_folder`
- `vault_upload`
- `vault_trash`
- `vault_move_in`
- `list_local`
- `find_duplicates`
- `find_large_files`
- `find_old_files`
- `storage_summary`
- `move_local`
- `rename_local`
- `create_local_folder`
- `trash_local`

## FAQ

### How does the server handle file security?

Decryption happens locally in memory within the process, and the server never sees file names or content in the clear.

### Can the AI assistant delete my files?

No, the server has no permanent-delete tool; instead, it moves items to a Bin where changes can be undone.