Vaultgateway
Encrypted secrets with runtime policy enforcement
Credentials the agent uses at runtime and never sees in the prompt.
audit log$250 cap
- 10:14cards.createAllowed
- 10:19email.sendAllowed
- 10:22payment.chargeAllowed
- 10:23payment.chargeRevoked
- 10:31formation.submitAllowed
- 10:38trading.orderRevoked
- 10:44vault.revealAllowed
Paste and ship
Drop this into Claude Code, Codex, or Cursor. It reads the docs and wires up Vault for you.
Agent prompt
Read https://vetta.sh/docs/identity/vault and use the naïve Vault primitive in my project. It is part of the gateway layer; wire it through naive.config.ts rather than calling a vendor directly.