telexed ~ c / 2e82c1c0-0fdradar:50 · agent_toolLIVE
← back
NO.
#2e82c1c0
Topic
AGENTS & TOOLS
Source
Hacker News · Show HN AI
Published
2026-04-22 16:25:28
Importance
★ 5/10 — radar 50
`Agent Vault`: Open-source credential proxy and vault for agents
FIG-0281:1

`Agent Vault`: Open-source credential proxy and vault for agents

Agents need service access but cannot be trusted with raw secrets under prompt injection. This pushes the brokered-proxy pattern into a reusable OSS service, so teams can test safer agent egress without rebuilding the security layer.

[ KEY POINTS ]
  1. It targets credential exfiltration, not generic data leakage: the agent uses services without ever seeing the underlying secret.
  2. The architecture uses a local forward proxy via HTTPS_PROXY, keeping APIs, CLIs, SDKs, and MCP flows mostly unchanged while inserting credential brokering.
  3. Full deployment assumes network lock-down so all outbound traffic is forced through the proxy; otherwise the safety model collapses.
  4. The design follows a pattern already visible in managed-agent stacks and outbound proxy setups, but packages it as a portable standalone component.
Originalgithub.com/Infisical/agent-vaultRead original →

// related