Set up a computer

Install the broker once on each computer your agents use. It keeps your secrets, so your agents never see them.

Before you start

An administrator account on that computer.
Node.js 22.23.4, 24.22.1 or 26.12.1 or newer (not 23 or 25), from nodejs.org: older ones lack a security fix, and the broker won't start on them.

Step 1: Install Wundervault

In a terminal on that computer:

Linux

Terminal

sudo npm install -g @wundervault/mcp-server@2

With sudo: the broker won't run a copy in your home folder.

macOS

Terminal

npm install -g @wundervault/mcp-server@2

Windows

PowerShell

npm install -g @wundervault/mcp-server@2

The broker gets its own account, with a folder your agents can't read.

Linux

Terminal

sudo sh "$(npm root -g)/@wundervault/mcp-server/packaging/install-daemon.sh"

macOS

Terminal

cd "$(npm root -g)/@wundervault/mcp-server"
sudo sh packaging/install-daemon-macos.sh

Windows

PowerShell, as administrator

Set-Location (Join-Path (npm root -g) "@wundervault\mcp-server")
powershell -ExecutionPolicy Bypass -File packaging\install-daemon-windows.ps1

To check the installer first, see Install & upgrade.

On the computer, run:
Linux
Terminal
```
sudo wundervault-agent --pair
```
macOS
Terminal
```
sudo wundervault-agent --pair
```
Windows
PowerShell, as administrator
```
wundervault-agent --pair
```
It shows a code and a fingerprint.
In your vault, open Computers and select Pair a computer.
Enter the code and select Look up.
Check that the fingerprint matches the one on the computer. Name the computer, then select It matches: pair this computer.

Install Node.js 22.23.4, 24.22.1 or 26.12.1 or newer from nodejs.org, then open a new terminal.

Install Node.js 22.23.4, 24.22.1 or 26.12.1 or newer, then run the step again.

On Linux or macOS, run it again with sudo:

Terminal

sudo npm install -g @wundervault/mcp-server@2

The broker isn't running on that computer, or the agent hasn't enrolled. Set up the computer, then paste the message again.