AgentVault solves the API key problem for autonomous agents by giving each one a scoped `avk_` credential that can fetch Fernet-encrypted secrets on demand. The MCP server exposes `get_credential`, `list_credentials`, `view_audit_log`, and `set_budget` tools over stdio, letting Claude or any MCP client pull decrypted keys with TTL bounds while recording every access. You get permission patterns like `stripe_*`, daily and monthly spend caps enforced at fetch time, and a full audit trail in Postgres. Reach for this when you're running multiple agents that need isolated access to production API keys without hardcoding secrets or building your own vault. Self-host or use the hosted Railway instance with Stripe billing tiers.
claude mcp add --transport stdio bch1212-agentvault uvx agentvault