WUNDERVAULT START FREE

A vault for AI agents

Give agents the work.
Keep the secrets.

Your agent asks. A helper app on your computer makes the call. Your agent gets the answer, never the secret.

Create your vault — free See how it works

Works with Claude, Codex and any agent that supports MCP, the standard way agents connect to tools.

Your vault: secrets, agents, approvals and a record of every use.

Get the MCP server where your agent already lives

What happens when your agent needs a secret

One request, start to finish.

Example: you ask your agent to list your Cloudflare sites.

A call through the helper app Your computer holds your agent, and the helper app in an account of its own, with your log beside it. One: the agent asks the helper app to make a call, and the helper app writes the request to your log, on your computer. Two: if the secret is set to ask first, you approve it yourself, with your passkey (face or fingerprint), on your phone or computer. Three: the helper app calls the service with the secret. Four: the answer comes back through the helper app with the secret removed. The secret goes only to the service, never to the agent. Your computer Own account Your account 1 2 3 4 Agent You approve with your passkey Helper app Your log Service
The secret goes to the service, never to your agent. Your log stays on your computer.

  1. Your agent asks.

    It asks the helper app on your computer to make the call, and never sees the key.

  2. Secrets that matter wait for you.

    If a secret is set to ask you first, the call waits for your passkey.

  3. The helper app makes the call.

    It adds the key and sends the request, from an account your agents can't open.

  4. Your agent gets the answer.

    The key is taken back out, so your agent gets only the answer.

Your laptop gets a helper app

A small helper app that does the work.

  • Makes API calls with your secrets
  • Signs SSH and git logins
  • Pays within your limits
  • Gives authenticator codes
  • Updates itself and your agents' connection
The helper app returns a few result cards to the agent, its secret still locked inside.

Your agent never holds the secret.

The helper app makes the call. Answers come back; secrets don't. How it works

A woman approves a request on her phone while the agent waits beside the helper app.

Secrets that matter wait for you.

Approve with your face, fingerprint or PIN, from any browser. Approvals

A man reviews a log of every use, beside the helper app with its secret still inside.

A record of every use.

Signed and kept on your computer, line by line. Security

More is coming: next, websites your agent can use through the vault.

Three plain promises.

Your agent never holds the secret.

Not in its chat, not in a file it can read, not in its memory.

We can't read your vault.

It's encrypted on your device before it reaches us. How

You decide what needs approval.

Approvals for the secrets that matter, from any browser. How

Agent payments

Your agent can pay, too.

Your agent asks the helper app to pay in USDC, within a daily limit you set. It never holds the wallet.

How agent payments work →

  • A daily limit you set, starting at $0
  • Payees you trust, by address
  • USDC on Base and Solana
  • Every payment in the signed log on your computer

Give your agents the secrets without giving them away.

Free to use. One command and one approval to set up.

Create your vault Read the setup guide