FormVault

io.github.terjetyl由 GitHub 帳號 terjetyl 發布v0.1.2更新於 Nov 4, 2026

Create and manage GDPR-compliant, EU-hosted forms from any MCP-compatible AI assistant.

已驗證Streamable HTTP可網頁執行效率與工作流商業與電商

概覽

AI 產生的概覽

FormVault MCP 讓 AI 助理在 FormVault 帳號中建立、檢視與刪除託管於歐盟、符合 GDPR 的表單，並列出表單提交內容。

可以做什麼
  • 列出帳號中所有表單及欄位數量，並讀取單一表單的完整欄位與設定定義
  • 依自然語言描述建立新表單
  • 永久刪除表單
  • 列出某個表單已解密的提交回覆
適用情境
適合在 FormVault 中維護表單時使用：以描述方式讓助理草擬、檢查或清理表單，例如含 GDPR 同意勾選框的客戶登記表。也適合查看哪些表單還沒有欄位。
執行需求
需要 FormVault 帳號及在後台建立的 API 金鑰。託管方式：連線遠端端點並透過 Authorization 標頭傳入 Bearer 權杖。本機方式：以 npx 執行 npm 套件 @formvault/mcp，並設定 FORMVAULT_API_KEY；可用 FORMVAULT_API_URL 覆寫 API 位址。需要能連線至 FormVault API 的網路。
安裝前請注意
API 金鑰（FORMVAULT_API_KEY 或 Authorization 標頭）可存取貴組織的表單，請妥善保管，外洩時應立即撤銷。delete_form 無法復原。list_submissions 會以明文回傳填答者的個人資料，這些資料可能隨後傳送給 AI 服務供應商，僅在確有必要時呼叫。此伺服器可在帳號中建立與刪除資料。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 FormVault，將其新增到工作區。
  2. 連接 Authorization token 憑證。它們會被私密儲存，絕不會在公開頁面上展示。
  3. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.terjetyl%2Fformvault/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "formvault": {
      "type": "http",
      "url": "https://api.formvault.eu/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

README

FormVault MCP server

[npm] [License: MIT]

Create and manage GDPR-compliant, EU-hosted forms from any MCP-compatible AI assistant.

This is an MCP server for FormVault, a form builder hosted in Germany. Point Claude, ChatGPT, Cursor, Copilot or any MCP-compatible assistant at your FormVault account and build forms by describing them.

Prerequisites

A FormVault account and an API key. Create the key at formvault.eu/app/api-keys.

Setup (hosted — recommended)

Add the hosted server to your assistant's MCP configuration — no install, no local process:

json
{  "mcpServers": {    "formvault": {      "url": "https://api.formvault.eu/mcp",      "headers": {        "Authorization": "Bearer fv_your_key_here"      }    }  }}

Claude Desktop's support for remote/header-based MCP servers depends on your version — check its current docs if the above doesn't show up as an option.

No tool takes a tenant id. The API key carries its own, so it cannot read or write another organisation's forms — and a form id it may not touch reports as not found rather than forbidden, so a key cannot be used to discover what exists. The server itself holds no standing credentials of its own; every request is scoped to whichever key you send. Revoke a key at any time from the API keys page.

Setup (npx / stdio)

For clients that don't yet support a remote/header-based server:

json
{  "mcpServers": {    "formvault": {      "command": "npx",      "args": ["-y", "@formvault/mcp"],      "env": {        "FORMVAULT_API_KEY": "fv_your_key_here"      }    }  }}

Restart your assistant and ask for what you need, for example:

  • "Build me a client intake form with a GDPR consent checkbox."
  • "List my forms and tell me which have no fields yet."
  • "Delete the test form I made earlier."
VariableRequiredDefault
FORMVAULT_API_KEYyes—
FORMVAULT_API_URLnohttps://api.formvault.eu

Self-hosting / local development

You can run this package yourself, either as a local stdio server or as your own HTTP deployment. It is a client of the FormVault API, so it still needs a FormVault account and API key:

bash
npm installnpm run build
# stdio (for a local Claude Desktop/Code config using "command"/"args")FORMVAULT_API_KEY=fv_... node dist/index.js
# HTTP (what the hosted deployment runs)PORT=3003 FORMVAULT_API_URL=https://api.formvault.eu node dist/httpServer.js

To develop against a local FormVault API, point FORMVAULT_API_URL at it (for example http://localhost:3000).

Tools

ToolWhat it does
list_formsEvery form in your account, with field counts
get_formOne form's full field and settings definition
create_formBuild a form from a description
delete_formRemove a form (irreversible)
list_submissionsDecrypted responses for a form

About respondent data

list_submissions returns your respondents' personal data in the clear. It is described to the model with an instruction not to call it unless you explicitly ask for responses, so ordinary form-building work never pulls it into context.

That is a deliberate boundary, not a limitation. FormVault stores submissions encrypted with AES-256-GCM on servers in Nuremberg, Germany, with a signed DPA on every plan. Whatever you send to your AI provider is your decision — this server's job is to make sure it is a decision rather than a side effect.

Links

Support

Questions and bug reports: open an issue. Pull requests are welcome.

License

MIT

來源：README.md，提交 b460972

工具

0
該伺服器需要 API 金鑰等憑證，因此 SourceWeft 無法在沒有憑證的情況下讀取其工具，也未收錄。

版本歷史

1
  1. v0.1.2最新Oct 21, 2026

評分

已滿足適用檢查項的 85%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分