# agent-vault

> HTTP credential proxy and vault for AI agents

Agent Vault is an open-source credential broker and proxy that sits between AI agents and external APIs. It prevents secret exfiltration by intercepting outbound requests and injecting real credentials in place of dummy tokens. It runs as a standalone Go binary, through a CLI wrapper, or in a Docker container.

- Source: https://github.com/Infisical/agent-vault
- Homepage: https://docs.agent-vault.dev
- License: NOASSERTION
- Built with: Go 77.6%, TypeScript 21.1%, Other 1.3%
- Stars: 2452
- Forks: 174
- Contributors: 22
- Last commit: 2026-10-27
- Latest release: v0.40.2 (2026-10-22)
- Purpose: AI & LLM tooling, Security & identity
- Type: Web, Docker / self-host, CLI
- For: Personal, Enterprise
- Enterprise signals: commercial support

## Worth score: 70/100

How much DigGitHub recommends it, from activity, adoption, docs, license and security signals.

- Popularity: 17/25
- Momentum: 10/20
- Maintenance: 25/25
- Community: 8/15
- Readiness: 10/15

## Downloads

Latest release: [v0.40.2](https://github.com/Infisical/agent-vault/releases/tag/v0.40.2). Files from the project's GitHub release, not checked by DigGitHub.

macOS:

- [agent-vault_0.40.2_darwin_amd64.tar.gz](https://github.com/Infisical/agent-vault/releases/download/v0.40.2/agent-vault_0.40.2_darwin_amd64.tar.gz) (14 MB, 1 downloads)
- [agent-vault_0.40.2_darwin_arm64.tar.gz](https://github.com/Infisical/agent-vault/releases/download/v0.40.2/agent-vault_0.40.2_darwin_arm64.tar.gz) (13 MB, 59 downloads)

Linux:

- [agent-vault_0.40.2_linux_amd64.tar.gz](https://github.com/Infisical/agent-vault/releases/download/v0.40.2/agent-vault_0.40.2_linux_amd64.tar.gz) (14 MB, 392 downloads)
- [agent-vault_0.40.2_linux_arm64.tar.gz](https://github.com/Infisical/agent-vault/releases/download/v0.40.2/agent-vault_0.40.2_linux_arm64.tar.gz) (13 MB, 47 downloads)

To check the files: [agent-vault_0.40.2_darwin_arm64.tar.gz.sbom.json](https://github.com/Infisical/agent-vault/releases/download/v0.40.2/agent-vault_0.40.2_darwin_arm64.tar.gz.sbom.json), [agent-vault_0.40.2_linux_arm64.tar.gz.sbom.json](https://github.com/Infisical/agent-vault/releases/download/v0.40.2/agent-vault_0.40.2_linux_arm64.tar.gz.sbom.json), [agent-vault_0.40.2_darwin_amd64.tar.gz.sbom.json](https://github.com/Infisical/agent-vault/releases/download/v0.40.2/agent-vault_0.40.2_darwin_amd64.tar.gz.sbom.json), [agent-vault_0.40.2_linux_amd64.tar.gz.sbom.json](https://github.com/Infisical/agent-vault/releases/download/v0.40.2/agent-vault_0.40.2_linux_amd64.tar.gz.sbom.json), [checksums.txt](https://github.com/Infisical/agent-vault/releases/download/v0.40.2/checksums.txt), [checksums.txt.sig](https://github.com/Infisical/agent-vault/releases/download/v0.40.2/checksums.txt.sig)

## Alternatives

- [Strix](https://diggithub.com/usestrix/strix.md): AI agents that pentest your own apps
- [postern](https://diggithub.com/mmartinez/postern.md): Credential-brokering HTTPS proxy for AI agents
- [portunus](https://diggithub.com/mdostal/portunus.md): Boundary-only secret broker keeping credentials out of LLM contexts
- [agent-vault](https://diggithub.com/CrimsonWorks-Inc/agent-vault.md): Local credential proxy for coding agents
- [mcp-approvals](https://diggithub.com/marklynd/mcp-approvals.md): Human-in-the-loop approval gate and audit log for AI agents
- [mcp-warden](https://diggithub.com/ermoluk/mcp-warden.md): Local-first credential broker and MCP server for AI agents
- [trustless](https://diggithub.com/ikkun1222/trustless.md): Credential broker CLI and proxy for AI agents
- [keyward](https://diggithub.com/arturayupov/keyward.md): Local, encrypted secret broker for AI coding agents

---

Source page: https://diggithub.com/Infisical/agent-vault
Updated: 2026-10-31