Connect Claude Code to Conjur
Set up in minutes
Choose where it runs
On your computer through your own Claude Code, or hosted in the cloud. The rest of setup adapts to your choice:
Pick what it can do in Conjur
A preset of real Conjur operations. Each one becomes a tool the agent can call, and it can't touch anything outside the list.
Connect Conjur
One sign-in. The agent acts through your account, scoped to the operations you picked.
Add your personal MCP link
The last step mints a private MCP URL for this agent and walks you through exactly this, with your real link filled in. The page flips to Connected the moment your Claude Code first calls in. Claude Code connects when a session starts — run claude, or restart a running one.
Run this in your terminal
<your-link> is your personal server URL — setup mints it for you.
Tools Claude Code gets
Conjur
15 toolsShow the authenticated account and username.
Read the latest or a retained version of a secret value.
Add a new secret value to an existing variable.
Fetch several secrets in one API call.
List accessible resources for the authenticated account.
List resources through the account resource endpoint.
List resources of a selected kind in the connected account.
Read resource metadata, permissions and versions.
Get role details, direct members or memberships.
Grant the selected role to a member.
Revoke a direct role membership.
Add policy data; omitted objects are retained and deletions are refused.
Modify policy data, including explicit delete, revoke and deny statements.
Replace a policy: existing objects omitted from this YAML will be deleted.
Read SSH public keys for a user or host.
About Claude Code
Frequently asked questions
More ways to connect
More tools for Claude Code
Use Conjur with other agents
Open your Claude Code agent in one click.
NoClick runs Claude Code for you with Conjur wired in as tools. Connect your account and run.