skills.rest
automateyournetwork
automateyournetworkCOMMUNITY
Explore all skills by this author →
Website𝕏@john_capobiancoGitHub

vault-mounts

Discover and manage HashiCorp Vault secret engine mounts via the sys API.

650|182|Updated Feb 19, 2026
Search Tags:#mcp#mounts#hashicorp vault#Secrets Management#kv-v2#vault api#secret engine
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill vault-mounts
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vault-mounts
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/vault-mounts
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill vault-mounts

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Managing HashiCorp Vault secret engine mounts typically requires memorizing CLI commands or crafting raw API calls against the sys/mounts endpoints, which slows down operators who need to audit, enable, or tune secret engines across environments.

Core Features & Use Cases

  • Mount Discovery: List all secret engine mounts and inspect configuration details for any specific mount such as KV or PKI.
  • Mount Lifecycle Management: Enable new secret engines (e.g., KV-v2 at a custom path), disable existing mounts, and tune mount configuration.
  • Auth Method Visibility: List configured authentication methods alongside secret engines for a complete Vault posture view.
  • Use Case: A platform engineer needs to audit which KV engines are enabled before rotating secrets; they ask the agent to list all mounts and show the configuration of the pki mount in one conversation.

Quick Start

Ask the agent to list all secret engine mounts and show the configuration for the pki mount.

Frequently Asked Questions about vault-mounts

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I list all secret engine mounts in HashiCorp Vault?▼

Use the list_mounts tool, which queries the Vault sys/mounts API and returns every enabled secret engine with its type and path. You need a Vault token with sys/mounts policy permissions.

How to enable a new KV-v2 secret engine in Vault?▼

Use the create_mount tool and specify the engine type and path, for example enabling KV-v2 at network-secrets. The skill sends the request through the vault-mcp server connected to the Vault sys API.

What permissions does the Vault token need for mount management?▼

The token must have a policy granting access to sys/mounts endpoints for listing, creating, tuning, and deleting mounts. Set it via the VAULT_TOKEN environment variable along with VAULT_ADDR.

Does this work with Vault Enterprise namespaces?▼

Yes, Vault Enterprise namespaces are supported by setting the optional VAULT_NAMESPACE environment variable. All mount operations then execute within that namespace context.

Can I tune an existing Vault mount configuration?▼

Yes, the tune_mount tool modifies configuration of an existing mount, such as default or maximum lease TTLs. It operates through the same sys/mounts API used by the Vault CLI tune command.

Related Skills

Explore More Software Engineering Skills→
Sun-Lab-NBBSun-Lab-NBB
2

checking-system-health

Automate pre-flight health verification for Sun lab acquisition systems.

Official
Advanced
ToanPV90ToanPV90

hashicorp-vault

Configure Vault engines, auth methods, and policies for secret management.

Community
Advanced
Veloxia-agencyVeloxia-agency

secrets-vault-manager

Generate HashiCorp Vault configurations, rotation plans, and audit analyses.

Community
Advanced
partme-aipartme-ai
610

terraform

Guide Terraform infrastructure as code with HCL syntax and state management.

Official
Intermediate