AVP
AI Agents & AssistantsA local HTTPS proxy that injects real secrets into outbound requests so callers only ever see placeholders, protecting against credential‑stealing attacks.
Features
- Just‑in‑time injection of API keys and other secrets via a loopback HTTPS proxy
- Supports multiple vault backends (Bitwarden Secrets Manager, Google Secret Manager, static YAML)
- Zero‑trust audit logging with optional off‑box shipping
- CLI (`avp`) for adding secrets, generating env files, and launching agents securely
- Skill integration (`avp-bindings`) lets AI assistants provision bindings without editing config
Recent releases
View all 7 releases →
Review required
v0.8.0
Breaking risk
Auth
RBAC
Breaking upgrade
GSM backend + honeytoken + healthz
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
pipx
brew
docker
Platforms
linux
macos
Similar tools
Alternative to
Vault Agent
Doppler
op (1password CLI)
superfly/tokenizer