Encrypted secrets with runtime policy enforcement
Per-user encrypted credentials — retrieved at runtime, never in prompts.
Read the launch post →audit log$250 cap
- 10:14cards.createAllowed
- 10:22payment.chargeAllowed
- 10:23payment.chargeRevoked
Paste and ship
Drop this into Cursor, Claude Code, or any agent. It reads the skill manifest and wires up Vault for you.
Agent prompt
Read https://usenaive.ai/skill.md and use the Naïve Vault primitive in my project. Start with: naive vault put instantly.api_key key_xyz
What you get
Encrypted at restPer-user key hierarchy.
Runtime fetchSecrets never land in model context.
Audit every revealWho accessed what, when.
Instant revokeRotate or delete without redeploying agents.
One call to vault
CLI, SDK, or REST — one bearer token, one credit balance.
CLI
Vault
Store API keys, passwords, and OAuth tokens encrypted per user. Agents fetch secrets at runtime through the control plane — every reveal logged, revocable instantly.
Encrypted at rest
Per-user key hierarchy.
Runtime fetch
Secrets never land in model context.
Audit every reveal
Who accessed what, when.
Instant revoke
Rotate or delete without redeploying agents.
# Run with your API key exported
$ naive vault put instantly.api_key key_xyz