Manages and encrypts sensitive API keys, tokens, and passwords for AI agents using a BIP39 mnemonic-based local vault.
Sponsored
AI agents frequently require access to various sensitive credentials like API keys, tokens, and passwords, which are often stored insecurely in plain text configuration files. This practice creates significant risks, including accidental data deletion, potential security breaches, and the inconvenience of re-collecting keys when switching machines. Vault offers a robust, local solution by encrypting all sensitive information with AES-256-GCM and securing it with a unique 12-word BIP39 mnemonic phrase. It functions as a zero-dependency secret management server, providing a secure and easily recoverable way for AI workflows to handle critical secrets, superior to vulnerable methods like environment variables or platform-specific keychains.
Key Features
01PBKDF2 (2048 rounds, SHA-512) for strong key derivation
020 GitHub stars
03AES-256-GCM encryption for secure local storage of secrets
04Zero external dependencies, running purely on Node.js built-in crypto
05BIP39 mnemonic-based encryption for key management
06Native MCP interface for seamless integration with AI clients
Use Cases
01Securely storing API keys, tokens, and passwords for AI agents
02Providing a local, offline secret management solution for personal AI workflows
03Recovering sensitive credentials after configuration file loss or machine changes
