Get started
Quickstart
Store your credentials in an access bundle and connect the agents that use them.
Why use Agent Vault?
Why AI agents shouldn’t have direct access to credentials and what Agent Vault does instead.
How it works
The pieces of an Agent Vault setup and how a session gives an agent access to APIs and MCP servers.
Plan your setup
Get a recommended setup for what you’re building.
Guides
Set up Agent Vault for where your agents run.
Modal
Run an Agent Vault proxy in each Modal sandbox so the agent never has access to a credential.
Daytona
Run an Agent Vault proxy beside each Daytona sandbox so the agent never has access to a credential.
E2B
Send each E2B sandbox’s traffic to an Agent Vault proxy over SOCKS5 so the agent never has access to a credential.
Kubernetes
Learn how to run AI agents in Kubernetes pods that contain no credentials and can only connect to the Agent Vault proxy.
Docker
Run an Agent Vault proxy beside each agent container so the agent never has access to a credential.
Concepts
Projects
Keep each agentic system’s credentials and members in a separate Agent Vault project.
Access bundles
Lists of services that AI agents can access during a session.
Services
Anything an AI agent talks to during a session, such as an API or an MCP server.
Variables
Values you store once and use in any service in an Agent Vault project.
Skills
Instructions you keep in Agent Vault and install for agents you start with an access bundle.
Sessions
Time-bound grants that let AI agents access services without holding real credentials.
Create sessions with the CLI
Start an agent from cron, a container, or CI, with a new session for each run.
Create sessions with the API
Create a session for each agent run from your own code.
Session logs
A record of every request an AI agent makes, stored encrypted.
Proxies
Forward proxies that intercept an AI agent’s requests and attach real credentials on the way out.
Access control
Understand how permissions work in an Agent Vault project.
Reference
CLI reference
Every flag of
infisical agent-vault proxy and infisical agent-vault run.