---
title: "HashiCorp Vault adapter: Kotharo"
version: v0.8.3
canonical: https://kotharo.com/docs/adapters/vault/
---

# HashiCorp Vault

Connects Kotharo to HashiCorp Vault for secrets. [All adapters](https://kotharo.com/docs/adapters/)

## What you need

- The `vault` command, from [Vault](https://developer.hashicorp.com/vault/install).
- The `jq` command, from [jq](https://jqlang.org/download/).

## Connect

`/kotharo:setup` finds HashiCorp Vault and takes you through these steps. To connect it by hand:

Install Vault. [Its install page](https://developer.hashicorp.com/vault/install) covers other systems.

macOS:

```
brew tap hashicorp/tap && brew install hashicorp/tap/vault
```

Windows, in Git Bash:

```
choco install vault
```

Linux:

```
brew tap hashicorp/tap && brew install hashicorp/tap/vault
```

Install jq. [Its install page](https://jqlang.org/download/) covers other systems.

macOS:

```
brew install jq
```

Windows, in Git Bash:

```
winget install jqlang.jq
```

Linux:

```
sudo apt-get install jq
```

## Sign in

Set VAULT_ADDR (and VAULT_NAMESPACE, if you use one), then run vault login -method=`<method>` -no-print with your team's sign-in method, such as oidc. Your token needs list and read on `<mount>`/metadata/*, and nothing on `<mount>`/data/*.

To check you are signed in, run `vault token capabilities sys/mounts`.

Generated from Kotharo v0.8.3.