Agent Vault is an open-source HTTP credential proxy and vault by Infisical designed to prevent AI agents from ever directly accessing secrets. Instead of returning credentials to agents, it sits between agents and target APIs, injecting credentials at the network layer via a transparent HTTPS proxy. Key features include AES-256-GCM encryption at rest, scoped sessions, request logging, and support for sandboxed container environments. It works with any HTTP-speaking agent including Claude Code, Cursor, and Codex, and provides both a CLI wrapper and a TypeScript SDK for orchestrators.
Table of contents
Why Agent VaultInstallationQuickstartDevelopmentOpen-source vs. paidContributingWe are hiring!Sort: