Credential Security

Vultrino

Secure Credentials.
Powerful AI.

Vultrino is a credential proxy that lets AI agents perform authenticated actions without ever exposing your secrets. From API keys to PGP signing to crypto wallets — extensible via plugins.

Open source · MIT Self-hosted Enforce plane · FeirAI
01 / Defense in depthFeatures

Layers

Defense in Depth

Multiple layers of security for all your credentials

Zero Exposure

Credential Isolation

AI agents never see your actual secrets. They reference aliases, and Vultrino handles the sensitive operations server-side. Your keys, tokens, and private data never leave your secure environment.

WASM Plugins

Infinitely Extensible

Add any credential type via WebAssembly plugins. PGP signing, cryptocurrency wallets, SSH keys, OAuth tokens — if you can build it, Vultrino can secure it. Plugins run in sandboxed isolation.

AES-256-GCM

Encrypted at Rest

All credentials are encrypted using AES-256-GCM with Argon2 key derivation. Even if someone gets your storage file, they can't read your secrets without the master password.

Policy Engine

Fine-Grained Control

Define URL patterns, method restrictions, and rate limits. Role-based access control lets you scope which credentials and actions each agent or application can access.

02 / CoverageUse Cases

Credentials

Built for Any Credential

From API keys to cryptographic signing — secure it all

01

API Keys & Tokens

GitHub, OpenAI, Stripe, AWS — let AI agents call APIs without exposing your keys.

02

PGP Signing

Sign commits, documents, and messages. Your private key stays private.

03

Crypto Wallets

Sign transactions without exposing seed phrases or private keys to agents.

04

SSH Keys

Authenticate to servers and services without sharing private keys.

05

MCP Integration

Native Model Context Protocol support for Claude, GPT, and other LLMs.

06

Web Dashboard

Manage credentials, roles, and permissions from a clean admin interface.

03 / TerminalQuick Start

Get running

Quick Start

Up and running in seconds

Terminal
# Initialize and store a credential
vultrino init
vultrino add --alias github --key ghp_xxx
 
# Start server and create a scoped API key
vultrino web &
vultrino key create my-agent --role executor
# → vk_a1b2c3...
 
# Use API key (no password needed!)
vultrino --key vk_a1b2c3... request github https://api.github.com/user
 
# Or connect AI agents via MCP
vultrino mcp

Next step

Secure Your AI Stack

Self-hosted and extensible to any credential type.

Get Started