Infisical launches Agent Vault so AI agents never hold real credentials
Agent Vault lets Claude Code, Codex and other agents call APIs without holding real keys, restricting requests to preset methods and paths, expiring sessions on a schedule and logging every request.
A credential an AI agent can read, is a credential it can leak. Introducing Agent Vault: a new Infisical product that lets Claude Code, Codex, and other agents call the APIs and services they need, without holding real credentials. With Agent Vault: > Your agents work as they normally do, with no code changes > A prompt-injected agent can only reach preapproved HTTP services, down to exact methods and paths > Agent sessions expire on a schedule you set, and every request is logged