AgentVault

Encrypted agent credential and memory vault. 100% local — no external API calls, no telemetry, no network communication. Everything runs on your device.

Implements the AVP (Agent Vault Protocol) open standard. Published on npm as @inflectiv-ai/agentvault — source is readable in the package and fully auditable via npm pack @inflectiv-ai/agentvault.

• Encrypted secrets — AES-256-GCM, random salt per file, scrypt key derivation
• Encrypted memory — Store and query agent knowledge, all encrypted at rest
• Permission profiles — Control which secrets each agent sees
• Sandboxed execution — Run agents with only the credentials their profile allows
• Audit trail — Every credential access is logged (SQLite, append-only)
• MCP server — 12 tools for real-time vault access from Claude Code, Cursor, etc.

MCP vs CLI

If the AgentVault MCP server is already connected (check for vault.secret.get, vault.memory.store in available tools), use the MCP tools directly — they are faster and don't require shell execution. This skill is for: