> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Agent Vault

> Let the AI agents in your infrastructure call HTTP APIs and MCP servers without having access to their credentials.

Infisical Agent Vault brokers credentials for the AI agents you run in your own infrastructure. Your agents call HTTP APIs and MCP servers through an Agent Vault proxy, which attaches the real credentials so the agents never see them.

## Get started

> [card] [Quickstart](https://infisical.com/docs/documentation/platform/agent-vault/quickstart.md)
>
> Store your credentials in an access bundle and connect the agents that use them.

> [card] [Why use Agent Vault?](https://infisical.com/docs/documentation/platform/agent-vault/why-agent-vault.md)
>
> Why AI agents shouldn't have direct access to credentials and what Agent Vault does instead.

> [card] [How it works](https://infisical.com/docs/documentation/platform/agent-vault/how-it-works.md)
>
> The pieces of an Agent Vault setup and how a session gives an agent access to APIs and MCP servers.

> [card] [Plan your setup](https://infisical.com/docs/documentation/platform/agent-vault/plan-your-setup.md)
>
> Get a recommended setup for what you're building.

## Guides

Set up Agent Vault for where your agents run.

> [card] [Modal](https://infisical.com/docs/documentation/platform/agent-vault/guides/modal.md)
>
> Run an Agent Vault proxy in each Modal sandbox so the agent never has access to a credential.

> [card] [Daytona](https://infisical.com/docs/documentation/platform/agent-vault/guides/daytona.md)
>
> Run an Agent Vault proxy beside each Daytona sandbox so the agent never has access to a credential.

> [card] [E2B](https://infisical.com/docs/documentation/platform/agent-vault/guides/e2b.md)
>
> Send each E2B sandbox's traffic to an Agent Vault proxy over SOCKS5 so the agent never has access to a credential.

> [card] [Kubernetes](https://infisical.com/docs/documentation/platform/agent-vault/guides/kubernetes)
>
> Learn how to run AI agents in Kubernetes pods that contain no credentials and can only connect to the Agent Vault proxy.

> [card] [Docker](https://infisical.com/docs/documentation/platform/agent-vault/guides/docker.md)
>
> Run an Agent Vault proxy beside each agent container so the agent never has access to a credential.

## Concepts

> [card] [Projects](https://infisical.com/docs/documentation/platform/agent-vault/projects.md)
>
> Keep each agentic system's credentials and members in a separate Agent Vault project.

> [card] [Access bundles](https://infisical.com/docs/documentation/platform/agent-vault/access-bundles.md)
>
> Lists of services that AI agents can access during a session.

> [card] [Services](https://infisical.com/docs/documentation/platform/agent-vault/services)
>
> Anything an AI agent talks to during a session, such as an API or an MCP server.

> [card] [Variables](https://infisical.com/docs/documentation/platform/agent-vault/variables.md)
>
> Values you store once and use in any service in an Agent Vault project.

> [card] [Skills](https://infisical.com/docs/documentation/platform/agent-vault/skills.md)
>
> Instructions you keep in Agent Vault and install for agents you start with an access bundle.

> [card] [Sessions](https://infisical.com/docs/documentation/platform/agent-vault/sessions)
>
> Time-bound grants that let AI agents access services without holding real credentials.

> [card] [Create sessions with the CLI](https://infisical.com/docs/documentation/platform/agent-vault/sessions-cli.md)
>
> Start an agent from cron, a container, or CI, with a new session for each run.

> [card] [Create sessions with the API](https://infisical.com/docs/documentation/platform/agent-vault/sessions-api.md)
>
> Create a session for each agent run from your own code.

> [card] [Session logs](https://infisical.com/docs/documentation/platform/agent-vault/session-logs.md)
>
> A record of every request an AI agent makes, stored encrypted.

> [card] [Proxies](https://infisical.com/docs/documentation/platform/agent-vault/proxies.md)
>
> Forward proxies that intercept an AI agent's requests and attach real credentials on the way out.

> [card] [Access control](https://infisical.com/docs/documentation/platform/agent-vault/access-control.md)
>
> Understand how permissions work in an Agent Vault project.

## Reference

> [card] [CLI reference](https://infisical.com/docs/cli/reference.md#agent-vault)
>
> Every flag of `infisical agent-vault proxy` and `infisical agent-vault run`.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.