FOR YOUR AI
Your AI
Connect Claude, ChatGPT or Cursor to a single project. It can manage your website, update your CRM, push to your repo — performing the actions without ever receiving a credential. Every move logged.
You've already done it. Everyone has.
Every credential your business runs on. One place. One connection at a time.
Keep every password, API key and login your business runs on in one secure place. Give your AI access to manage your website, your CRM, your repos — scoped to one project at a time. Give your team access to exactly what they need. Nothing pasted, nothing shared in a doc, nothing you can't take back.
Works with Claude, ChatGPT, Cursor — anything that speaks MCP.
Runs your everyday tools
- GitHub
- GoHighLevel
- Stripe
- Notion
- Supabase
The uncomfortable part
A chat window is not a safe place to put a key.
When you paste an API key into ChatGPT or Claude to get something done, it doesn't disappear when the conversation ends. It sits in a log you don't control, in a history you can't audit, in a context that may be retained. You can't rotate it, because you don't know everywhere it went. You can't revoke it, because there's nothing to revoke.
And it isn't only the AI. The hosting login is in a doc your VA can open, along with everything else in that doc. Nobody has rotated the CRM token in two years — not because it's fine, but because nobody knows what would break.
The Vault fixes both. Everything in one place, and a way to hand out access without handing over the key.
“I gave it my CRM key so it could clean up 400 contacts. Four minutes, done. Then I sat there thinking — where did that key just go?”
Use cases
One vault. Three kinds of access.
FOR YOUR TEAM
Your team
Give a VA the hosting login without giving them the bank login. Or deposit-only access, so they can add credentials to a project without reading anything already in it.
FOR YOUR PROJECTS
Your projects
Building something? Keep each client, site or app in its own project — repo token, database keys, hosting, domain, all together. Connect your AI to one, and only that one.
Your Claude
“Add these 3 contacts to the CRM”
The Vault
Holds the credential, performs the action
GoHighLevel
3 contacts created
The request goes in, the work gets done, the result comes back — and the credential never leaves the middle box.
Two things nobody else does
The details that make this safe to actually use.
Deposit-only
Let someone add a credential they can't read
Send a client or a VA a link. They drop in the Stripe key, the hosting login, whatever you asked for. They cannot open anything already in there — not by policy, by encryption. No more “just email me the password.”
Every action logged
See exactly what your AI did
Not a vague activity feed. Which credential, which action, which agent, what time — in a tamper-evident log you can hand to a client or an auditor without flinching.
Riverside Dental · recent activity
- ClaudeGoHighLevel — created 3 contacts22 min ago
- ClaudeGitHub — pushed 2 commits to main1 hr ago
- Maria R.Deposited — hosting control panel login3 hrs ago
- Todd M.Revoked agent connection — old laptopYesterday
thevault.app / projects / riverside-dental
Riverside Dental
Private2 shared with AI7 credentials · 3 people · 1 agent · 2 expiring soon
| Credential | Account | Secret | Expires | AI |
|---|---|---|---|---|
| GoHighLevel location token | riverside-dental | •••••••••• | in 14 hours | |
| GitHub — site repo | focalpoint/riverside | •••••••••• | in 6 days | |
| Namecheap registrar | todd@riverside.com | •••••••••• | — | |
| Hosting control panel | riverside_admin | •••••••••• | — |
Security
Built so a mistake stays small.
Scoped by default, logged by default, revocable in one click.
Encrypted
AES-256-GCM, scoped per project
Every credential is encrypted before it is stored, with a unique key per project so one compromise can never become all of them.
Never exposed
Your AI acts, but never holds
The vault performs the operation and returns the result. There is no tool, no endpoint and no setting that hands a credential to an agent.
Accountable
Tamper-evident audit trail
Every access — person or agent — is written to a hash-chained log. Revoke a connection and it stops working immediately.
We publish our full security model, including its limits, on our security page.
Pricing
Security is never the upgrade.
Encryption, the full audit trail, instant revocation and the risk warnings are on every plan — including the free one. You pay for scale and for sharing, never for safety.
Free
$0
No card, no expiry.
One project, kept as safe as every paid plan.
- 1 project, 10 credentials
- 2 people, 1 AI connection
- Full encryption, revocation, risk warnings
- Audit log — 30 days of history
- Deposit-only links
- Expiry alerts and rotation reminders
- Audit export
- Groups
- Client handoff
- Per-client audit reports
Starter
$90/yr
$9/mo billed monthly — annual is 2 months free.
For one person running several sites of their own.
- 5 projects, unlimited credentials
- 3 people, 3 AI connections
- Full encryption, revocation, risk warnings
- Audit log — full history
- Deposit-only links
- Expiry alerts and rotation reminders
- Audit export
- Groups
- Client handoff
- Per-client audit reports
Team
$290/yr
$29/mo billed monthly — annual is 2 months free.
For a team with VAs and contractors sharing access.
- 25 projects, unlimited credentials
- 10 people, 10 AI connections
- Full encryption, revocation, risk warnings
- Audit log — full history
- Deposit-only links
- Expiry alerts and rotation reminders
- Audit export
- Groups
- Client handoff
- Per-client audit reports
Agency
$790/yr
$79/mo billed monthly — annual is 2 months free.
You hold credentials for other people's businesses.
- Unlimited projects, unlimited credentials
- 25 people, unlimited AI connections
- Full encryption, revocation, risk warnings
- Audit log — full history
- Deposit-only links
- Expiry alerts and rotation reminders
- Audit export
- Groups
- Client handoff
- Per-client audit reports
Start on the free plan — no card, no expiry. Upgrade whenever you outgrow it. Included with AI Your Business and AI Your Website — Starter’s features with a fourth seat, so our team joining your project never costs you one.
Stop pasting keys into chat windows.
Your credentials are already scattered. Putting them somewhere safe takes ten minutes — and then your AI can actually get to work.