FormVault

io.github.terjetyl由 GitHub 账号 terjetyl 发布v0.1.2更新于 Nov 4, 2026

Create and manage GDPR-compliant, EU-hosted forms from any MCP-compatible AI assistant.

已验证Streamable HTTP可网页运行效率与工作流商业与电商

概览

AI 生成的概览

FormVault MCP 让 AI 助手在 FormVault 账户中创建、查看和删除托管于欧盟、符合 GDPR 的表单，并列出表单提交内容。

可以做什么
  • 列出账户中所有表单及字段数量，并读取单个表单的完整字段与设置定义
  • 根据自然语言描述创建新表单
  • 永久删除表单
  • 列出某个表单已解密的提交回复
适用场景
适合在 FormVault 中维护表单时使用：用描述的方式让助手起草、检查或清理表单，例如带 GDPR 同意勾选框的客户登记表。也适合查看哪些表单还没有字段。
运行要求
需要 FormVault 账户及在后台创建的 API 密钥。托管方式：连接远程端点并通过 Authorization 请求头传入 Bearer 令牌。本地方式：用 npx 运行 npm 包 @formvault/mcp，并设置 FORMVAULT_API_KEY；可用 FORMVAULT_API_URL 覆盖 API 地址。需要能访问 FormVault API 的网络。
安装前请注意
API 密钥（FORMVAULT_API_KEY 或 Authorization 请求头）可访问本组织的表单，请妥善保管，泄露后及时吊销。delete_form 不可恢复。list_submissions 会以明文返回受访者的个人数据，这些数据可能随后发送给 AI 服务商，仅在确有必要时调用。该服务器可在账户中创建和删除数据。

安装

在 SourceWeft 中

  1. 打开 控制台中的 FormVault，将其添加到工作区。
  2. 连接 Authorization token 凭据。它们会被私密存储，绝不会在公开页面上展示。
  3. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.terjetyl%2Fformvault/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "formvault": {
      "type": "http",
      "url": "https://api.formvault.eu/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

README

FormVault MCP server

[npm] [License: MIT]

Create and manage GDPR-compliant, EU-hosted forms from any MCP-compatible AI assistant.

This is an MCP server for FormVault, a form builder hosted in Germany. Point Claude, ChatGPT, Cursor, Copilot or any MCP-compatible assistant at your FormVault account and build forms by describing them.

Prerequisites

A FormVault account and an API key. Create the key at formvault.eu/app/api-keys.

Setup (hosted — recommended)

Add the hosted server to your assistant's MCP configuration — no install, no local process:

json
{  "mcpServers": {    "formvault": {      "url": "https://api.formvault.eu/mcp",      "headers": {        "Authorization": "Bearer fv_your_key_here"      }    }  }}

Claude Desktop's support for remote/header-based MCP servers depends on your version — check its current docs if the above doesn't show up as an option.

No tool takes a tenant id. The API key carries its own, so it cannot read or write another organisation's forms — and a form id it may not touch reports as not found rather than forbidden, so a key cannot be used to discover what exists. The server itself holds no standing credentials of its own; every request is scoped to whichever key you send. Revoke a key at any time from the API keys page.

Setup (npx / stdio)

For clients that don't yet support a remote/header-based server:

json
{  "mcpServers": {    "formvault": {      "command": "npx",      "args": ["-y", "@formvault/mcp"],      "env": {        "FORMVAULT_API_KEY": "fv_your_key_here"      }    }  }}

Restart your assistant and ask for what you need, for example:

  • "Build me a client intake form with a GDPR consent checkbox."
  • "List my forms and tell me which have no fields yet."
  • "Delete the test form I made earlier."
VariableRequiredDefault
FORMVAULT_API_KEYyes—
FORMVAULT_API_URLnohttps://api.formvault.eu

Self-hosting / local development

You can run this package yourself, either as a local stdio server or as your own HTTP deployment. It is a client of the FormVault API, so it still needs a FormVault account and API key:

bash
npm installnpm run build
# stdio (for a local Claude Desktop/Code config using "command"/"args")FORMVAULT_API_KEY=fv_... node dist/index.js
# HTTP (what the hosted deployment runs)PORT=3003 FORMVAULT_API_URL=https://api.formvault.eu node dist/httpServer.js

To develop against a local FormVault API, point FORMVAULT_API_URL at it (for example http://localhost:3000).

Tools

ToolWhat it does
list_formsEvery form in your account, with field counts
get_formOne form's full field and settings definition
create_formBuild a form from a description
delete_formRemove a form (irreversible)
list_submissionsDecrypted responses for a form

About respondent data

list_submissions returns your respondents' personal data in the clear. It is described to the model with an instruction not to call it unless you explicitly ask for responses, so ordinary form-building work never pulls it into context.

That is a deliberate boundary, not a limitation. FormVault stores submissions encrypted with AES-256-GCM on servers in Nuremberg, Germany, with a signed DPA on every plan. Whatever you send to your AI provider is your decision — this server's job is to make sure it is a decision rather than a side effect.

Links

Support

Questions and bug reports: open an issue. Pull requests are welcome.

License

MIT

来源：README.md，提交 b460972

工具

0
该服务器需要 API 密钥等凭据，因此 SourceWeft 无法在没有凭据的情况下读取其工具，也未收录。

版本历史

1
  1. v0.1.2最新Oct 21, 2026

评分

已满足适用检查项的 85%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分