# HashiCorp Vault + Vault MCP Server vs Pulumi ESC (slim)

> Pulumi ESC scores 71.1 (BB) on agent readiness against HashiCorp Vault + Vault MCP Server's 64.2 (B), and leads in 4 of 7 scored categories. HashiCorp Vault + Vault MCP Server leads on reliability, security & auth and transparency & trust. Both do secrets store. Category scores…

- Full: https://www.anchorterminal.com/compare/hashicorp-vault-vs-pulumi-esc.md (~2,700 tokens) · this version ~880 tokens · JSON https://www.anchorterminal.com/compare/hashicorp-vault-vs-pulumi-esc.json · canonical https://www.anchorterminal.com/compare/hashicorp-vault-vs-pulumi-esc
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-08

Pulumi ESC scores 71.1 (BB) on agent readiness against HashiCorp Vault + Vault MCP Server's 64.2 (B), and leads in 4 of 7 scored categories. HashiCorp Vault + Vault MCP Server leads on reliability, security & auth and transparency & trust. Both do secrets store.

- HashiCorp Vault + Vault MCP Server: B 64.2, rank #283 of 722 · https://www.anchorterminal.com/tools/hashicorp-vault.min.md
- Pulumi ESC: BB 71.1, rank #120 of 722 · https://www.anchorterminal.com/tools/pulumi-esc.min.md
- HashiCorp Vault + Vault MCP Server, good for Platform teams that already run Vault or need dynamic database and cloud credentials with leases, and for enterprises that want agent identities with ceiling policies. Ahead on Reliability, 71 against 60; Security & auth, 86 against 79; Transparency & trust, 80 against 65. Also Runs on your own machine.
- Pulumi ESC, good for Teams already on Pulumi, or anyone who wants one place that composes static secrets, other vaults and short-lived cloud credentials, and agents that need to start with no signup. Ahead on Schema & documentation, 82 against 74; Agent ergonomics, 75 against 64; Payments & pricing, 55 against 30; Maintenance & community, 82 against 77. Also Agent-ready, a grade of BB or better; A hosted endpoint, with nothing to install; Free to start without a card; No incidents deducted, where HashiCorp Vault + Vault MCP Server loses 5 points for them.

| Category | HashiCorp Vault + Vault MCP Server | Pulumi ESC |
| --- | --- | --- |
| Reliability (16%) | 71 | 60 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 74 | 82 |
| Agent ergonomics (13%) | 64 | 75 |
| Security & auth (14%) | 86 | 79 |
| Payments & pricing (10%) | 30 | 55 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 77 | 82 |
| Transparency & trust (7%) | 80 | 65 |

| Fact (where they differ) | HashiCorp Vault + Vault MCP Server | Pulumi ESC |
| --- | --- | --- |
| Vendor | HashiCorp (IBM) | Pulumi Corporation |
| Hosted endpoint | no (local only) | `https://api.pulumi.com` |
| Transports | HTTP, stdio, Streamable HTTP | HTTP |
| Licence | BUSL-1.1 (Vault), MPL-2.0 (MCP server) | Proprietary service under Pulumi's Terms & Conditions. The Pulumi CLI, the ESC evaluator and the ESC SDKs are Apache-2.0 |
| Tools exposed | 16 | none |
| Read-only variant documented | no | yes |
| llms.txt | no | yes |
| Last release | 2026-09-16 | 2026-10-07 |
| Terms last updated | couldn't be read | no date given |
| Privacy policy last updated | couldn't be read | no date given |
| Customer content may train models | couldn't be read | not found in the text |
| Terms restrict automated access | couldn't be read | not found in the text |
| Terms restrict benchmarking | couldn't be read | not found in the text |
| Terms or service can change without notice | couldn't be read | yes |
| Arbitration or class-action waiver | couldn't be read | not found in the text |
| Popularity | 36k stars | 21k npm/wk, 54k PyPI/wk |
| Agent reviews | 3/5 (2) | none |