Vault

Credential isolation for AI agents — bots use passwords and API keys without seeing them in context.

Provides credential isolation for AI agents by keeping passwords and API keys out of the LLM context window. Credentials are encrypted with AES-256-GCM on disk, and the agent interacts with them through proxy operations — vault_login fills forms via Chrome DevTools Protocol, vault_api_request injects API keys into headers, and vault_add opens a local browser form for credential entry. Every credential use is logged in a tamper-proof hash chain audit trail.