vault

Open-source credential gateway for AI agents that injects service credentials without exposing the real keys to the agent. Includes a vault, access tokens, host/path matching, and local quick-start instructions.

Cloak is a local secrets vault for AI agents that lets them use API keys without exposing the raw key to the model. The repo shows a CLI, local daemon, MCP server, policy controls, and quickstart commands for connecting with AI clients.