Get started
Quickstart
Launch an agent that makes authenticated API calls without needing an actual token.
Why use Agent Vault?
Learn more about the problem Agent Vault addresses.
How it works
Understand the Agent Vault mental model.
Agent guides
Set up Agent Vault for the agent you use, or for an agent you wrote yourself.Claude Code
Codex
OpenCode
Hermes Agent
OpenClaw
Your own agent
Concepts
Access bundles
Lists of services that AI agents can access during a session.
Services
External APIs that an AI agent can securely call during a session.
Variables
Values you store once in an access bundle and use in any of its services.
Sessions
Time-bound grants that let AI agents access services without holding real credentials.
Create sessions with the CLI
Start an agent from cron, a container, or CI, with a new session for each run.
Create sessions with the API
Create a session for each agent run from your own code.
Session logs
A record of every request an AI agent makes, stored encrypted in your own Amazon S3 bucket.
Proxies
Forward proxies that intercept an AI agent’s requests and attach real credentials on the way out.
Access control
Understand how permissions work in Agent Vault.
Reference
CLI reference
Every flag of
infisical agent-vault proxy and infisical agent-vault run.