AgentVault Server

The official open-source client for AgentVault — the API-first password/secrets manager for AI agents. An agent gets a real vault, stores secrets encrypted at rest, and fetches exactly one credential at runtime via an av://vault/secret/field reference under a scoped, revocable token.

This package is MIT-licensed. The AgentVault server (vaults, AES-256-GCM encryption, scoped-token issuance, audit) is a Vektra Industries product.

Install

pip install agentvault-sdk        # or: uv pip install agentvault-sdk

Use

from agentvault_sdk import AgentVaultClient

av = AgentVaultClient("https://vault.example.com", token="av_...")
av.create_vault("prod")
av.put_secret("prod", "stripe", {"api_key": "sk_live_..."})

# fetch one secret at runtime — no hardcoded keys
key = av.resolve("av://prod/stripe/api_key")

MCP server

Expose AgentVault tools to any MCP-capable agent over stdio:

export AGENTVAULT_URL=https://vault.example.com
export AGENTVAULT_TOKEN=av_...
agentvault-mcp

Tools: av_create_vault, av_put_secret, av_get_secret, av_resolve, av_list_secrets, av_issue_token, av_rotate_secret.

---

© 2026 Pablo Navarro / Vektra Industries. MIT.