Vault

Encrypted secrets with runtime policy enforcement

Store API keys, passwords, and OAuth tokens encrypted per user. Agents fetch secrets at runtime through the control plane — every reveal logged, revocable instantly.

Read the launch post →
Run in your agent

Paste and ship

Drop this prompt into Cursor, Claude Code, or any coding agent. It reads the skill manifest and wires up Vault for you.

Agent prompt

Read https://usenaive.ai/skill.md and use the Naïve Vault primitive in my project. Start with: naive vault put instantly.api_key key_xyz

Drop into any agent

In action

Per-user encrypted credentials — retrieved at runtime, never in prompts.

  • Encrypted at restPer-user key hierarchy.
  • Runtime fetchSecrets never land in model context.
  • Audit every revealWho accessed what, when.
  • Instant revokeRotate or delete without redeploying agents.
Exact code

One call to vault

Same primitive from the CLI, SDK, or REST — one bearer token, one credit balance.

CLI

Vault

Store API keys, passwords, and OAuth tokens encrypted per user. Agents fetch secrets at runtime through the control plane — every reveal logged, revocable instantly.

Encrypted at rest
Per-user key hierarchy.
Runtime fetch
Secrets never land in model context.
Audit every reveal
Who accessed what, when.
Instant revoke
Rotate or delete without redeploying agents.
# Run with your API key exported
$ naive vault put instantly.api_key key_xyz

Related primitives

Start building with Vault

Get your API key and add vault to any agent in minutes — no infrastructure to run.