LibreAI / Agents IA / agent-vault
// agents · Infisical/agent-vault

agent-vault

agent-vault est un projet de agents IA open source, créé par Infisical (Infisical/agent-vault sur GitHub). Il compte 2 323 étoiles sur GitHub et 163 forks, il est publié sous la licence NOASSERTION et a été mis à jour pour la dernière fois sur GitHub le 4 octobre 2026.

Infisical's credential vault and HTTP proxy, so AI agents call APIs without ever holding your real secrets.

★ 2,3 k étoiles⑂ 163 forksNOASSERTIONmis à jour oct. 2026
▦ visuel — le README de ce projet ne contient aucune capture intégrable,
voici donc un emplacement réservé. Le guide ci-dessous est complet malgré tout.
// détails du projet

Détails du projet

Étoiles GitHub
2 323
Forks
163
Licence
NOASSERTION
Dernière mise à jour sur GitHub
4 octobre 2026
Catégorie
Agents IA
Type de fiche
Guide d'installation complet
Site officiel
Official site
// fonctionnement

Comment ça marche

  1. Clarify your goal

    Decide which credentials your agents should be able to use indirectly, and where the vault will run, ideally on a separate machine from the agents.

  2. Get the project

    Install Agent Vault with the official install script or the Docker image, and start the server with a master password.

  3. Install and configure

    Create a vault, add credentials and service rules that substitute dummy values with real ones, then create an agent and its token.

  4. Run your first task

    Set the agent environment variables, install the CLI on the agent side, and run your agent through Agent Vault so its requests are brokered.

// fonctionnalités

Pourquoi on l'adore

Credential brokering

Agents hold dummy placeholder values; the proxy substitutes real credentials into headers on outbound requests to services such as LLM providers and GitHub.

Pluggable credential stores

Use the built-in local encrypted store, or back a vault with an external secrets store such as Infisical, including dynamic secrets.

Transparent, proxy-based integration

Works with existing MCP tools, CLIs, SDKs, and APIs by bootstrapping the agent environment with HTTPS_PROXY, with no code changes to the agent.

Egress filtering and strict mode

Control which services and endpoints each agent may reach, and optionally deny any request that matches no service rule.

Request logging

Authenticated traffic flowing through the proxy can be inspected to monitor and diagnose agent behaviour.

Single binary with management UI and SDK

The server exposes a management API/UI on port 14321 and the MITM proxy on 14322, and a TypeScript SDK lets orchestrators mint short-lived tokens for sandboxed agents.

Advertisement
// lancez-le

Lancez-le vous-même

  1. Clone the project (for building or inspection)

    Most deployments use the install script or Docker image rather than a source build.

    git clone https://github.com/Infisical/agent-vault.git
    cd agent-vault
  2. Install and start the server

    Use the official installer, set a master password, and start the daemon.

    curl --proto '=https' --proto-redir '=https' --tlsv1.2 -fsSL https://get.agent-vault.dev | sh
    export AGENT_VAULT_MASTER_PASSWORD=<your master password>
    agent-vault server -d
  3. Run an agent through the vault

    After creating a vault, credentials, and an agent token in the UI or CLI, launch your agent via the proxy.

    agent-vault run -- claude
// cas d'usage

Ce que vous pouvez créer

Advertisement
// faq

Questions fréquentes

Who maintains it?

It is built and maintained by Infisical, the open-source secrets management company.

Is it free to use?

This project is open source and self-hostable at no cost; check the repository license file for exact terms, since the catalog metadata lists it as NOASSERTION. Infisical also sells a commercial, platform-integrated version.

Does it need a paid API key?

Agent Vault does not need an LLM API key itself; it stores and brokers your existing keys for services like Anthropic or GitHub.

How does it compare to a well-known alternative?

Generic forward proxies such as mitmproxy or Squid move traffic but do not broker credentials; Agent Vault is purpose-built to substitute and guard credentials for agent workflows.

How do I get started?

Install it with the get.agent-vault.dev script or Docker, start the server, create a vault and agent token, then run your agent with agent-vault run.

// continuez l'exploration

Outils similaires

Agents IA

qwen-audio-agent

Real-time voice runtime that keeps AI agents talking, working, and present.

★ 2,8 k étoilesApache-2.0
Voir le guide →
Agents IA

omnigent

Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents — swap harnesses without rewrit…

★ 10,4 k étoilesApache-2.0
Voir le guide →
Agents IA

UI-TARS-desktop

ByteDance's open-source multimodal AI agent stack: GUI agents that see and operate real desktops

★ 39,2 k étoilesApache-2.0
Voir le guide →
Agents IA

dmux

Dev agent multiplexer designed for git worktrees and coding agents.

★ 1,8 k étoilesMIT
Voir le guide →
Agents IA

agenticSeek

A fully local Manus-style autonomous agent: browses, codes and speaks — no APIs, no subscription

★ 27,5 k étoilesGPL-3.0
Voir le guide →
Agents IA

agent-rules-books

Battle-tested coding rules for AI agents, distilled from classic programming books.

★ 2,9 k étoilesMIT
Voir le guide →
// alternatives

Alternatives en Agents IA

Les autres projets de la catégorie Agents IA avec le plus d'étoiles du catalogue LibreAI — la sélection réaliste d'alternatives si agent-vault ne vous convient pas.

// plus en agents

Plus en Agents IA

Projets de la catégorie Agents IA proches dans le catalogue, les plus proches en étoiles de agent-vault — continuez à explorer de part et d'autre.

Obtenir agent-vault

Gratuit et ouvert : récupérez le code source, mettez une étoile au dépôt et commencez à créer.