vlt_connect_integrationStart the guided integration flow for a third-party service (e.g. Stripe, Supabase, Twilio). Call without keys first to get setup instructions, then c
vlt_get_secretCheck whether a secret is available in the local vallt for a given service. Never exposes the raw value — only confirms availability.
vlt_list_integrationsList all connected integrations for the current project, with status and recommended next steps.
vlt_get_project_contextFetch the full project context — build type, stack, connected integrations, recommended next. Call this at the start of a session to understand what
vlt_inject_envPush all connected integration secrets into the project
vlt_validate_tokenCheck auth status and subscription tier. Surfaces an upgrade prompt if the free tier is exhausted. Run this after pasting a new API token.
vlt_health_checkCheck whether connected integrations are still valid. Re-validates each key against its service and surfaces degraded tokens with specific remediation
vlt_scan_envScan .env files in the current directory for security issues: secrets not gitignored, test keys in production, unfilled placeholders, and services tha
vlt_import_envScan .env files in the current project, detect existing API keys for known services, validate them, and import them into Vallt in one shot. Use this w
vlt_disconnect_integrationRemove a connected integration from Vallt — deletes the keys from the OS keychain and frees up the integration slot. Use this to swap out a service or
We re-grade npm:@vallt/mcp-server on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.
Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:
https://wmcp.sh/mcp/trust
readOnly vs observed behavior) layer on via the wmcp.sh proxy.