envault
Secrets vault workflow for agents: aliases and ciphers only, never plaintext.
Plugin bundle · by purifido
About
envault is a plugin bundle for AI coding tools published by purifido. Marketplaces we read that list it: 1 (Community GitHub marketplaces). We first saw it on 2026-10-28 and have recorded no change since. As of our marketplace pass on 2026-11-06.
What it asks for
- Installs as a plugin bundle
- Hooks: 1
What it declares, asks for and runs, in full
Only install plugins from developers you trust. We list what marketplaces publish and do not test plugins.
Works with
- Claude Code
From the marketplaces that list it and the MCP transport it declares, as each client documents them. We do not test plugins.
Connect
Commands and configs built only from what its marketplaces declare. We do not run them for you and do not test plugins.
As a Claude Code plugin
Built from what Community GitHub marketplaces declares.
/plugin marketplace add mildynora/envault
/plugin install envault@envaultWhere it is published
| Marketplace | Status | Version | Figures | Verified | First seen |
|---|---|---|---|---|---|
| Community marketplace mildynora/envault (Open the source on GitHub) | Listed | 0.7.0 | Forks (GitHub): 11 Stars (GitHub): 87 |
Not marked |
Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.
Listed in one community marketplace
| Marketplace | Repository | Stars (GitHub) |
|---|---|---|
| envault | mildynora/envault | 87 |
What the bundle contains
As published on Community GitHub marketplaces.
Skills: 1
envault
Hooks: 1
PreToolUse
What changed
- Became a product we track
- Community GitHub marketplaces: appeared
Similar plugins
Products whose own names, descriptions, tools and skills are closest in meaning to this one, on every marketplace we read. Closeness is ranked within this list only.
-
AI agents use your Obsidian secrets by name — values never reach their context.
-
Manage GPG-encrypted environment secrets from Claude Code - a secure alternative to plaintext .env files. Store, retrieve, share, and revoke secrets in `dotsecenv` vaults where…
-
envcp dev.fentz.envcp/envcp
Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.
-
Guide for configuring the Infisical Agent — a client daemon that manages auth token lifecycle and renders secrets to files via Go templates.
-
Secure environment variable management with Varlock for secrets, API keys, credentials, and sensitive configuration.
-
Central API key vault — consolidate scattered .env keys into an encrypted cloud-synced vault, register without chat exposure, auto-wire keys when tasks need them, propagate…
-
secretcarousel io.github.jyswee/secretcarousel
Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.
-
Encrypted local vault for API keys. Your AI fetches keys on demand and scans code for leaks.
-
Encrypted secrets vault for AI agents. 27 MCP tools resolve secrets at runtime, never leaking them.
-
Let AI agents use secrets without seeing them: inject into a command, redact the output.
Similar plugins by marketplace
The same question asked of one marketplace at a time: is there an analog of this plugin there?
Has a listing on Claude Code: claude-plugins-community (5)
-
Manage GPG-encrypted environment secrets from Claude Code - a secure alternative to plaintext .env files. Store, retrieve, share, and revoke secrets in `dotsecenv` vaults where…
-
Secure environment variable management with Varlock for secrets, API keys, credentials, and sensitive configuration.
-
Identity, credential vault, and audit security for AI agents. ClawLock gives every AI agent its own Ed25519 cryptographic identity, stores API keys in an AES-256-GCM encrypted…
-
Scan your codebase for exposed secrets and API keys, generate .env templates from environment variable usage, validate .env files against .env.example, and rotate secrets. Keeps…
-
Ed25519-signs every tool call and appends to a hash-chained, tamper-evident audit log. Zero config — signing starts immediately after install. No native dependencies (embedded…
Has a listing on Claude Code: claude-plugins-official (5)
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
Vercel deployment platform integration. Manage deployments, check build status, access logs, configure domains, and control your frontend infrastructure directly from Claude Code.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
WorkOS integration skills for AuthKit, SSO, Directory Sync, RBAC, Vault, Audit Logs, migrations, and API references.
Has a listing on Claude: knowledge-work-plugins (5)
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
-
Official Buildkite skills for Claude Code, Cursor, and other AI coding agents — pipelines, migration, preflight, agent runtime, CLI, and API
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
MCP server for terminal commands, file operations, and process management
Has a listing on Codex: openai-curated (openai/plugins) (5)
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Codex Security workflows for security scans, analysis, and investigation.
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
Has a listing on Community GitHub marketplaces (4)
-
Guide for configuring the Infisical Agent — a client daemon that manages auth token lifecycle and renders secrets to files via Go templates.
-
Central API key vault — consolidate scattered .env keys into an encrypted cloud-synced vault, register without chat exposure, auto-wire keys when tasks need them, propagate…
-
Secrets firewall for tool calls: denies (or asks, per level) any Read/Edit/Write/Bash/Grep that would read, search, modify, or exfiltrate .env files, SSH keys, cloud credentials…
-
Mod (function hooks): masks secret values in tool results before the model reads them. Requires Claude Code 2.1.266+. On 2.1.266 to 2.1.286 set…
Has a listing on Copilot CLI: github/awesome-copilot (5)
-
Vercel deployment platform integration. Manage deployments, check build status, access logs, configure domains, and control your frontend infrastructure directly from Claude Code.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
See a live map of the Copilot agents on your computer, their sub-agents, their commands, and where their data goes.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
foundry-hosted-agent-copilotkit
Build CopilotKit + AG-UI web apps on Microsoft Foundry hosted agents (Microsoft Agent Framework): wiring, native Foundry primitives, human-in-the-loop approvals, azd deploy, and…
Has a listing on Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Microsoft Dataverse plugin for coding agents, covering record CRUD, bulk data operations, advanced queries, schema and metadata, administration, security, environment management…
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
code-apps-preview
Build and deploy Power Apps code apps using React, Vite, and Power Platform connectors.
Has a listing on Cursor: cursor/plugins (5)
-
Scaffold and validate new agent plugins.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Build apps, scripts, and automations with the TypeScript SDK.
-
Fan large tasks out across parallel cloud agents with planners, workers, verifiers, and structured handoffs.
-
Patterns for designing CLIs that coding agents can run reliably: flags, help with examples, pipelines, errors, idempotency, dry-run.
Has a listing on Docker MCP Catalog (5)
-
MCP server for terminal commands, file operations, and process management
-
Give your AI agents trusted access to the full Postman platform.
-
Connects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
VeyraX MCP is the only connection you need to access all your tools in any MCP-compatible environment.
Has a listing on Official MCP Registry (5)
-
AI agents use your Obsidian secrets by name — values never reach their context.
-
envcp dev.fentz.envcp/envcp
Encrypted environment variable vault with AI access policies, keeping secrets safe from AI agents.
-
secretcarousel io.github.jyswee/secretcarousel
Agent-first secrets vault. Store, rotate, and share credentials from chat. 20 tools.
-
Encrypted local vault for API keys. Your AI fetches keys on demand and scans code for leaks.
-
Encrypted secrets vault for AI agents. 27 MCP tools resolve secrets at runtime, never leaking them.
Has a listing on PyPI (MCP servers) (5)
-
e2b com.mcparmory/e2b
Create and manage secure sandboxes for running AI agent code
-
altr-mcp-server io.github.altrsoftware/altr-mcp-server
MCP server for ALTR data security: databases, tags, policies, classification, access, audits
-
mcp-safeguard com.cognivators/mcp-safeguard
MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.
-
Every tool your AI needs in one self-hosted install: memory, reasoning, git, Docker and more.
-
Let one coding-agent CLI consult another: Codex, Claude Code, OpenCode, Copilot or Antigravity.
Has a listing on npm registry (MCP servers) (5)
-
Let AI agents use secrets without seeing them: inject into a command, redact the output.
-
HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.
-
OS keychain secrets for AI coding agents, over MCP.
-
1password io.github.CakeRepository/1password
MCP server for 1Password service accounts — tools and resources for vaults and credentials
-
AI-safe credential broker for MCP — run saved SSH/MySQL/psql aliases; passwords never reach AI.
Found by meaning, not by shared code or a shared repository: similar plugins stay separate products, and this is not a review or a recommendation.
Want this mark on your plugin in our catalog?
Prove you maintain it with a file in its repository, a file on your domain or a DNS record, and you can show this mark on the card, with live banners for your site and README. How verification works
You also get alerts when a marketplace lists it, drops it, changes its verified mark or what it asks for, and its remote endpoint goes on monitoring as a web service.
Data comes from public marketplace files in GitHub repositories of their authors. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.