Glossary
Secret vault
Also called: credential vault, secrets management
Definition
A secret vault is encrypted storage for the credentials an agent needs, injected at runtime so keys are never written into prompts, code, or configuration files.
In practice
The default alternative is what most setups start with: an .env file, a few keys pasted into a config, and a shell history full of tokens. It works immediately and it is the arrangement people regret, because rotating a key then means hunting through every place it was pasted, and any of those places can leak. A vault turns rotation into one edit and keeps the value out of logs and prompts. The scoping rule matters as much as the storage: one credential per integration, read-only where the job is read-only, so revoking one thing does not stop everything.
Read more
Nearby terms
All 18 termsRun agents without the homework
Qoren runs OpenClaw, Hermes, and Codex agents in managed environments, with the restarts, secrets, schedules, and spend caps handled for you.
Start free trial