KeyVault Secrets Manager - Complete Usage

Use this guide when an agent needs to read, write, rotate, inject, or expose credentials safely through KeyVault.

Core Rules

• Do not store secrets in plaintext files unless export is explicitly requested.
• Do not print full secret values unless the user explicitly asks.
• Prefer project scope over global scope.
• Prefer allowlisted key injection over injecting everything.
• For MCP, keep restrictive policy defaults unless user asks to open access.

Install and Verify

pip install git+https://github.com/ylz201/keyvault.git
pip install "keyvault-ai[mcp] @ git+https://github.com/ylz201/keyvault.git"
keyvault info

Full CLI Usage

Set secret

keyvault set KEY [VALUE] [--project PROJECT] [--desc TEXT] [--stdin]

keyvault set OPENAI_API_KEY
keyvault set OPENAI_API_KEY sk-xxx --project myapp
printf 'sk-xxx' | keyvault set OPENAI_API_KEY --stdin --project myapp

Get secret

keyvault get KEY [--project PROJECT] [--unmask]

List secrets

keyvault list [--project PROJECT] [--all]

Delete secret

keyvault delete KEY [--project PROJECT] [--force]

Import/Export dotenv

keyvault import FILEPATH [--project PROJECT]
keyvault export [--project PROJECT] [--output FILE]

keyvault import .env --project myapp
keyvault export --project myapp --output .env.myapp

Smart scan dotenv

keyvault scan-env [--project PROJECT] [--file FILE ...] [--root DIR] [--recursive] [--all] [--apply/--dry-run] [--force]

# preview only
keyvault scan-env --project myapp --dry-run

# import high-confidence secret-like keys
keyvault scan-env --project myapp --apply

Inject into subprocess

keyvault inject [--project PROJECT] [--global/--no-global] [--key KEY ...] -- CMD [ARGS...]

# recommended least privilege mode
keyvault inject --project myapp --no-global --key OPENAI_API_KEY -- python app.py

Info and hardening

keyvault info
keyvault harden [--delete-file] [--force]

Typical Agent Flows

Create project secrets

keyvault set OPENAI_API_KEY --project myapp
keyvault set DEEPSEEK_API_KEY --project myapp

Run script with scoped credentials

keyvault inject --project myapp --no-global --key OPENAI_API_KEY -- python run.py

Rotate and verify

keyvault set OPENAI_API_KEY sk-new --project myapp
keyvault get OPENAI_API_KEY --project myapp

Migrate existing dotenv safely

keyvault scan-env --project myapp --dry-run
keyvault scan-env --project myapp --apply

Python SDK

from keyvault import get_secret, set_secret, list_secrets, delete_secret

set_secret("OPENAI_API_KEY", "sk-xxx", project="myapp")
value = get_secret("OPENAI_API_KEY", project="myapp", fallback_env=False)
items = list_secrets(project="myapp")
ok = delete_secret("OPENAI_API_KEY", project="myapp")

get_secret lookup order:

1. project scope
2. global scope
3. os.environ (if fallback_env=True)

MCP Setup

python -m keyvault.mcp_server

Claude Desktop config:

{
  "mcpServers": {
    "keyvault": {
      "command": "python",
      "args": ["-m", "keyvault.mcp_server"]
    }
  }
}

Tools:

• secrets_list
• secrets_get
• secrets_set
• secrets_delete

MCP Policy Variables

Safe MCP baseline:

export KEYVAULT_MCP_ALLOW_LIST=1
export KEYVAULT_MCP_ALLOW_GET=1
export KEYVAULT_MCP_ALLOW_GLOBAL=0
export KEYVAULT_MCP_ALLOWED_KEYS=OPENAI_API_KEY
python -m keyvault.mcp_server

Runtime Variables

Missing Key Prompt

Use this prompt:

This operation requires OPENAI_API_KEY. Please run: keyvault set OPENAI_API_KEY <your-key> --project <project-name> and retry.