{"slug": "agent-vault", "name": "Agent Vault", "category": "ai", "category_name": "AI models and assistants", "description": "", "recommenders": 4, "commenters": 6, "warners": 0, "score": 4.138, "rising": 0.02, "first": "2026-04-23", "latest": "2026-10-15", "why": "I really like the approach you've taken of providing an egress proxy", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 4, "neutral": 1, "compare": 1, "warn": 0}, "spark": [0, 0, 0, 0, 0, 2, 0, 1, 0, 0, 0, 1], "listed": true, "loved": [], "caveat": "", "short_quote": "I really like the approach you've taken of providing an egress proxy", "kind": "", "icon": false, "domain": "agentvault.io", "github_repo": null, "official_url": "https://agentvault.io", "pricing": "", "aliases": ["Agent Vault", "AgentVault", "agent-vault"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 801706464, "item_id": 50106654, "url": "https://news.ycombinator.com/item?id=50106654", "by": "reinsbr", "date": "2026-10-15", "stance": "recommend", "quote": "awesome - check out docs.agentvault.io for more info on the technical specs", "excerpt": "awesome - check out docs.agentvault.io for more info on the technical specs", "context": "", "use_case": "", "switched_from": "", "story": "Agent Vault"}, {"id": 775939777, "item_id": 48496236, "url": "https://news.ycombinator.com/item?id=48496236", "by": "rough-sea", "date": "2026-06-11", "stance": "recommend", "quote": "AV has more sophisticated storage of creds", "excerpt": "Yes works at the wire level, not http. Have a look at the example config file https://github.com/denoland/clawpatrol/blob/d2e531d8cb0f1a3a214b5224757c90f7ca338820/examples/gateway.example.hcl#L374-L385 Claw Patrol holds credentials - so probably doesn't make sense to layer with AV - but it's true that AV has more sophisticated storage of creds (eg using 1p)", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Claw Patrol, a security firewall for agents"}, {"id": 766155760, "item_id": 47884735, "url": "https://news.ycombinator.com/item?id=47884735", "by": "rmorlok", "date": "2026-04-23", "stance": "recommend", "quote": "I really like the approach you've taken of providing an egress proxy", "excerpt": "I really like the approach you've taken of providing an egress proxy. That let's you do a lot of things that layer around providing gaurdrails and auditing. I've been taking a similar approach on an open source embedded iPaaS project I've been working on where it primarily offers an authenticating egress proxy to whatever business logic needs it (agent, sync engine, etc). https://github.com/rmorlok/authproxy", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Agent Vault \u2013 A HTTP credential proxy and vault for AI agents"}, {"id": 766134656, "item_id": 47883416, "url": "https://news.ycombinator.com/item?id=47883416", "by": "codebje", "date": "2026-04-23", "stance": "recommend", "quote": "was missing exactly this Vault", "excerpt": "This isn't the only thing you'd want to do. I use containers to isolate agents to just the data I intend for them to read and modify. If I have a data exfiltration event, it'll be limited to what I put into the container plus whatever code run inside the container can reach. I have limited data in reach of the agent, limited network access for it, and was missing exactly this Vault. I'm relieved not to need to invent", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Agent Vault \u2013 A HTTP credential proxy and vault for AI agents"}]}], "caveats": [], "who": [], "tags": [], "use_cases": [], "compared": [], "makers": [{"id": 765860672, "item_id": 47866292, "url": "https://news.ycombinator.com/item?id=47866292", "by": "dangtony98", "date": "2026-04-22", "stance": "recommend", "quote": "Yeah so Agent Vault (AV) solves the credential exfiltration problem", "excerpt": "Yeah so Agent Vault (AV) solves the credential exfiltration problem which is related to but different from data exfiltration. You're right that if an attacker can access the proxy vault then by definition they'd similarly be able to proxy requests through it to get data back but at least AV prevents them from gaining direct access to begin with (the key to access the proxy vault itself can also be made ephemeral, sco", "context": "", "use_case": "credential proxy for AI agents", "switched_from": "", "story": "Show HN: Agent Vault \u2013 A HTTP credential proxy and vault for AI agents"}, {"id": 751354080, "item_id": 46959630, "url": "https://news.ycombinator.com/item?id=46959630", "by": "hugoventures1", "date": "2026-02-10", "stance": "recommend", "quote": "I spent 3 hours building AgentVault.", "excerpt": "After watching OpenClaw hit 179K GitHub stars while accumulating 5 CVEs, and 341 malicious marketplace skills, and exposing 42K instances in 10 days, I spent 3 hours building AgentVault. The Issue The research conducted by Penligent, Zenity, and CrowdStrike reached the conclusion that prompt injection is architecturally unsolvable: you simply cannot prevent a bad prompt from reaching the model. However, the subsequen", "context": "", "use_case": "Security wrapper for AI agents", "switched_from": "", "story": "AgentVault: Security Wrapper for OpenClaw (built in a couple hours))"}], "threads": [{"url": "https://news.ycombinator.com/item?id=47865822", "title": "Show HN: Agent Vault \u2013 A HTTP credential proxy and vault for AI agents", "mentions": 4}, {"url": "https://news.ycombinator.com/item?id=50106206", "title": "Agent Vault", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49239751", "title": "Docker Sandboxes \u2013 Disposable, isolated sandboxes for AI agents", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48462928", "title": "Show HN: Claw Patrol, a security firewall for agents", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46959629", "title": "AgentVault: Security Wrapper for OpenClaw (built in a couple hours))", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {"compare": 1, "recommend": 2}, "2026-05": {}, "2026-06": {"recommend": 1}, "2026-07": {}, "2026-08": {"neutral": 1}, "2026-09": {}, "2026-10": {"recommend": 1}}, "quotes": [{"id": 801706464, "item_id": 50106654, "url": "https://news.ycombinator.com/item?id=50106654", "by": "reinsbr", "date": "2026-10-15", "stance": "recommend", "quote": "awesome - check out docs.agentvault.io for more info on the technical specs", "excerpt": "awesome - check out docs.agentvault.io for more info on the technical specs", "context": "", "use_case": "", "switched_from": "", "story": "Agent Vault"}, {"id": 787998835, "item_id": 49249927, "url": "https://news.ycombinator.com/item?id=49249927", "by": "grudg3", "date": "2026-08-10", "stance": "neutral", "quote": "implementing a pi extension that leverages smolvm and agent-vault", "excerpt": "Wouldn't say 'better' alternative, but I worked on making my own setup that I can trust by implementing a pi extension that leverages smolvm and agent-vault. The VM tooling is controlled by nix flakes. I can't share the source code (developed on company time), but I have a 'spec' of the whole thing, which you should be able to feed to your agent to replicate - https://gist.github.com/mahalel/c4e984292ff90bd4e11269555", "context": "", "use_case": "", "switched_from": "", "story": "Docker Sandboxes \u2013 Disposable, isolated sandboxes for AI agents"}, {"id": 775939777, "item_id": 48496236, "url": "https://news.ycombinator.com/item?id=48496236", "by": "rough-sea", "date": "2026-06-11", "stance": "recommend", "quote": "AV has more sophisticated storage of creds", "excerpt": "Yes works at the wire level, not http. Have a look at the example config file https://github.com/denoland/clawpatrol/blob/d2e531d8cb0f1a3a214b5224757c90f7ca338820/examples/gateway.example.hcl#L374-L385 Claw Patrol holds credentials - so probably doesn't make sense to layer with AV - but it's true that AV has more sophisticated storage of creds (eg using 1p)", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Claw Patrol, a security firewall for agents"}, {"id": 766155760, "item_id": 47884735, "url": "https://news.ycombinator.com/item?id=47884735", "by": "rmorlok", "date": "2026-04-23", "stance": "recommend", "quote": "I really like the approach you've taken of providing an egress proxy", "excerpt": "I really like the approach you've taken of providing an egress proxy. That let's you do a lot of things that layer around providing gaurdrails and auditing. I've been taking a similar approach on an open source embedded iPaaS project I've been working on where it primarily offers an authenticating egress proxy to whatever business logic needs it (agent, sync engine, etc). https://github.com/rmorlok/authproxy", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Agent Vault \u2013 A HTTP credential proxy and vault for AI agents"}, {"id": 766134656, "item_id": 47883416, "url": "https://news.ycombinator.com/item?id=47883416", "by": "codebje", "date": "2026-04-23", "stance": "recommend", "quote": "was missing exactly this Vault", "excerpt": "This isn't the only thing you'd want to do. I use containers to isolate agents to just the data I intend for them to read and modify. If I have a data exfiltration event, it'll be limited to what I put into the container plus whatever code run inside the container can reach. I have limited data in reach of the agent, limited network access for it, and was missing exactly this Vault. I'm relieved not to need to invent", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Agent Vault \u2013 A HTTP credential proxy and vault for AI agents"}, {"id": 766134240, "item_id": 47883390, "url": "https://news.ycombinator.com/item?id=47883390", "by": "sharathr", "date": "2026-04-23", "stance": "compare", "quote": "agent-vault does not solve identity, only how its stored", "excerpt": "From what I can tell, agent-vault does not solve identity, only how its stored. For true agent identity, you should look into: https://github.com/highflame-ai/zeroid (author: full disclosure)", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Agent Vault \u2013 A HTTP credential proxy and vault for AI agents"}]}