Infisical/agent-vault
A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
5 releases in the last 90 days, the latest 4 days ago, with 17 contributors on GitHub.
Use Cases & Benefits
- Provides an HTTP credential proxy and vault that brokers AI agents' access to APIs without exposing real credentials.
- Eliminates credential exfiltration risk by intercepting and injecting credentials into outbound requests transparently via a MITM proxy.
- Use for securing remote coding agents like Claude Code to safely access APIs such as Anthropic and GitHub without leaking secrets.
- Use for enabling all-purpose AI agents like OpenClaw and Hermes to proxy outbound API requests securely through a centralized vault.
- Use for managing ephemeral sandboxed AI agents by minting short-lived tokens that proxy requests through Agent Vault for controlled access.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
Other
GitHub could not identify this license; read the LICENSE file before depending on it.
Community files
- README: present
Watch-outs
- License not identified by GitHub; read the LICENSE file before depending on it.
General guidance from repository metadata, not legal advice. How we score
From the README
HTTP credential proxy and vault
An open-source credential broker by Infisical that sits between your agents and the APIs they call.
Agents should not possess credentials. Agent Vault eliminates credential exfiltration risk with brokered access.
New here? The launch blog post has the full story behind Agent Vault.
Traditional secrets management involves returning credentials back to you applications and services. This breaks down with AI agents which can be tricked via prompt injection into leaking secrets. This is the problem of credential exfiltration.
Agent Vault was created to solve credential exfiltration for all AI agents. Instead of giving AI agents credentals directly, you store them in Agent Vault (e.g.
ANTHROPIC_API_KEY,GITHUB_PAT, etc.) and force your agents to route HTTP requests through it. Agent Vault intercepts every request and attaches credentials onto it before forwarding the request to the target outbound API.By default, requests not matching any service forward as plain proxy traffic; flip a vault into strict deny mode (
unmatched_host_policy=deny) to reject them with 403 instead.Read the full backstory behind Agent Vault here.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
Forks
174+59
Open issues
97+39
Compared with peers in AI Agents
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| vercel-labs/agent-desktop | 17.0K | +13.3K | 33 | today |
| thedotmack/claude-mem | 113.6K | +8.8K | 35 | today |
| stablyai/orca | 116.8K | +6.6K | 40 | today |
| milind-soni/OpenMausBot | 13.5K | +6.0K | 45 | today |
| HKUDS/DeepTutor | 55.5K | +5.5K | 65 | 5 days ago |
| Infisical/agent-vault | 2.4K | — | 35 | 4 days ago |
| Category median | 55.5K | +6.6K | 40 | — |
Also by Infisical
Other repositories from this maintainer that GStars tracks
Discover Repositories
Search across tracked repositories by name or description