Credential management for AI agents
Zero-knowledge encrypted vault with native MCP interface. Agents request credentials through scoped permissions. Humans approve. Every access logged.
Interactive demo
Create a vault, store a secret, then simulate an agent requesting access through policy controls.
Agent: invoice-reconciler
vault_get("OPENAI_API_KEY")
Live vault state
No secrets stored yet.
{
"mcpServers": {
"agentvault": {
"command": "npx",
"args": ["@agentvault/mcp-server"],
"env": {
"VAULT_KEY": "lvk_..."
}
}
}
}Capabilities
AES-256-GCM with Argon2id key derivation. Server never sees plaintext.
Read-only, time-limited, vault-scoped credentials with instant revocation.
Every secret access logged with agent identity, timestamp, and source.
Critical secrets require approval before retrieval.
Centralized policy management across autonomous workers.
Audit exports in JSON/CSV with policy and access evidence.