Secure Vault

Setup

Usage

Store a Secret

{baseDir}/secure-vault.js set --name "api_key" --value "secret-value"

Retrieve a Secret

{baseDir}/secure-vault.js get --name "api_key"

List All Secrets

{baseDir}/secure-vault.js list

Delete a Secret

{baseDir}/secure-vault.js delete --name "api_key"

Export Secrets (Encrypted)

{baseDir}/secure-vault.js export --output "vault-backup.enc"

Import Secrets

{baseDir}/secure-vault.js import --path "vault-backup.enc"

Options

--name

--value

--path

--output

--key

Encryption

• Key file stored at

  ~/.config/agent/vault.key

  (mode 0600)
• Secrets encrypted before storage
• Key file never leaves the local system

Security Features

• Local-only key: Encryption key never stored with secrets
• File permissions: Key file created with 0600 permissions
• No plaintext storage: All secrets stored encrypted
• Secure deletion: Overwrites data before deletion

Response Format

{
  "success": true,
  "name": "api_key",
  "encrypted": true
}

When to Use

• Storing API keys securely
• Managing credentials for multiple services
• Backup and restore encrypted secrets
• Secure configuration storage
• Managing secrets across environments