WUNDERVAULT START FREE

A vault for AI agents

Give agents the work.
Keep the secrets.

Your agent asks. A helper app on your computer makes the call. Your agent gets the answer, never the secret.

Create your vault — free See how it works

Works with Claude, Codex and any agent that supports MCP, the standard way agents connect to tools.

Your vault: secrets, agents, approvals and a record of every use.

Get the MCP server where your agent already lives

What happens when your agent needs a secret

One request, start to finish.

Example: you ask your agent to list your Cloudflare sites.

  1. Your agent
    You: List my Cloudflare sites.
    Agent: Asking the helper app to call Cloudflare…

    Your agent asks the helper app. It never has the key.

  2. Your phone
    Claude Code wants to use Cloudflare
    api.cloudflare.com
    Example passkey approval sheet. The illustrated action is “Approve with passkey”.

    Only if you set Cloudflare to ask first.

  3. Your log · on your computer
    09:41  Claude Code → api.cloudflare.comGET /zones  ✓ 200

    The helper app adds the key, makes the call and writes it down.

  4. Your agent
    Agent: You have 3 sites: example.com, shop.example.com and blog.example.com.
    No key in the reply

    Your agent gets the answer, never the key.

See the full diagram

Your laptop gets a helper app

A small helper app that does the work.

  • Makes API calls with your secrets
  • Signs SSH and git logins
  • Pays within your limits
  • Gives authenticator codes
  • Updates itself and your agents' connection
The helper app returns a few result cards to the agent, its secret still locked inside.

Your agent never holds the secret.

The helper app makes the call. Answers come back; secrets don't. How it works

A woman approves a request on her phone while the agent waits beside the helper app.

Secrets that matter wait for you.

Approve with your face, fingerprint or PIN, from any browser. Approvals

A man reviews a log of every use, beside the helper app with its secret still inside.

A record of every use.

Signed and kept on your computer, line by line. Security

More is coming: next, websites your agent can use through the vault.

Three plain promises.

Your agent never holds the secret.

Not in its chat, not in a file it can read, not in its memory.

We can't read your vault.

It's encrypted on your device before it reaches us. How

You decide what needs approval.

Approvals for the secrets that matter, from any browser. How

Agent payments

Your agent can pay, too.

Your agent asks the helper app to pay in USDC, within a daily limit you set. It never holds the wallet.

How agent payments work →

  • A daily limit you set, starting at $0
  • Payees you trust, by address
  • USDC on Base and Solana
  • Every payment in the signed log on your computer

Give your agents the secrets without giving them away.

Free to use. One command and one approval to set up.

Create your vault Read the setup guide