Agent Vault is an open-source HTTP credential proxy and vault for AI agents, exposing a server, MITM proxy, and CLI to broker credentials for outbound API requests.
Collecting history — the radar snapshots this repo daily. The trend line appears after 3 days of data (1 so far).
What it is
Agent Vault is an open-source credential broker and proxy that sits between AI agents and the APIs they call. It stores credentials and brokers them to AI agents using a MITM proxy architecture. It is distributed as a single binary that runs a server and CLI, with a management UI available via the same deployment.
How it works
Agent Vault intercepts outbound requests from AI agents and substitutes credentials in headers or modifies requests before forwarding to the target API. It can be configured to proxy through a local HTTP API on port 14321 and a MITM proxy on port 14322. It supports branding as a standalone binary or Docker deployment and provides an API and CLI to manage vaults, credentials, services, and agents.
Getting started
The README includes installation and startup steps:
- Install and start an Agent Vault server with a master password:
curl --proto '=https' --proto-redir '=https' --tlsv1.2 -fsSL https://get.agent-vault.dev | sh
export AGENT_VAULT_MASTER_PASSWORD=your-password
agent-vault server -d
- Run with Docker:
docker run -it -p 14321:14321 -p 14322:14322 \
-e AGENT_VAULT_MASTER_PASSWORD=your-password \
-v agent-vault-data:/data infisical/agent-vault
- Basic workflow steps include creating a vault, credentials, services, and agents, and then configuring environment variables for agents:
AGENT_VAULT_ADDR=http://<your-addr>:14321
AGENT_VAULT_TOKEN=<agent-token-from-agent-vault>
AGENT_VAULT_VAULT=<vault-in-agent-vault>
...
ANTHROPIC_API_KEY=__anthropic_api_key__ // dummy key that will be substituted by Agent Vault
- The README also shows how to install the Agent Vault CLI and example commands:
curl --proto '=https' --proto-redir '=https' --tlsv1.2 -fsSL https://get.agent-vault.dev | sh
- Verifying downloaded release binaries via attestation:
gh attestation verify agent-vault_*.tar.gz --repo Infisical/agent-vault
Recent releases
Latest release v0.39.1 (2026-08-04) includes fixes to master password documentation and dependency bumps. Previous releases include v0.39.0 (2026-06-24) and v0.38.0 (2026-06-22) with new agent support and features.
Traction
stars: 2011 forks: 119 open_issues: 61 language: Go license: none listed created: 2026-03-27 last_push: 2026-08-04 topics: agents, ai-agents, secrets-management
Caveats
license: none listed; repository indicates an MIT expat license in related docs but the top section here states none listed. Open issues: 61. Creation date and last push provided. No age beyond creation date.