Vault the secret. Hand the agent a scoped bvt_ token. Cap it, audit it, kill it in one click — and even prompt-injected, it cannot steal the key or misuse it.
The agent gets this token — never your key. Cap it, audit it, and revoke it in one click.
Give an agent your GitHub / Stripe / DB key through a scoped token. Host pinned, methods and paths allowlisted, secret injected server-side.
A drop-in MCP server for Claude Desktop, Cursor and Claude Code. The config holds a bvt_ token, never a provider key.
AES-256-GCM with per-key derived keys. Decrypted only in-flight, never returned to the agent.
One OpenAI-compatible endpoint for every provider. Auto-routes by model, translates tool calls and images.
Revoke a token, a key, or everything. The next call fails immediately.
Per-token spend caps and RPM/RPD limits, enforced atomically — a burst can't blow past the cap.
Mint a bvt_ token, then plug it into any MCP client — or broker any API key over HTTP. Your config holds the token, never your real key.
{
"mcpServers": {
"blackvault": {
"url": "https://black-vault-murex.vercel.app/api/mcp",
"headers": { "Authorization": "Bearer bvt_your_token" }
}
}
}Drop into claude_desktop_config.json or mcp.json. Governed by your budget caps, model limits and kill switch.
# allowed by policy -> 200, real key injected server-side curl https://black-vault-murex.vercel.app/api/egress/user \ -H "Authorization: Bearer bvt_your_token" # prompt-injected misuse -> 403 blocked + audited curl -X DELETE https://black-vault-murex.vercel.app/api/egress/repos/you/app \ -H "Authorization: Bearer bvt_your_token"
Injected server-side toward a pinned host. A prompt-injected delete or exfil attempt is blocked and audited — the agent never sees the key.
Add an API key or credential. Encrypted with AES-256-GCM using a per-key derived key — and never returned to the agent.
Generate a bvt_ token per agent with a policy: allowed hosts, methods and paths, a budget cap, and rate limits.
The agent works through the token — it cannot see, steal, or misuse the secret. Every call is audited; one click kills it.
Free during beta. Open source. Self-hostable. Set up in two minutes.