NEW
Pro

Agent Vault
Save Credentials, Reuse Later

Agent identities expire, but your credentials don't have to. Save email and password pairs to the encrypted vault before they're gone, then reuse them whenever you need to log back in.

Pro & Business

Agent
Vault

Save credentials, reuse later. Encrypted at rest, searchable by site and category.

Encrypted Credential Storage

AES-256-GCM encryption with per-user derived keys. Passwords are only decrypted when you request them.

GET/api/vault/{id} decrypted
{
  "site": "GitHub",
  "email": "bot7k4x@748392.best",
  "password": "Kx9#mL2pQr4!vB7w",
  "category": "dev-tools"
}

Save Before Expiry

One click to save any active identity's credentials to your encrypted vault before the inbox expires.

Identity Activebot7k4x@748392.best
Save to Vaultencrypting credentials...
Add Metadatasite: "GitHub" category: "dev-tools"
StoredAES-256-GCM encrypted

Search & Categorize

Find any credential instantly. Filter by category or search across site names, emails, and notes.

dev-toolssocialtestingfinanceshopping
GitHub
bot7k4x@...
Twitter
agentw2n@...
Stripe
testx9p@...
Discord
signup4m@...
npm
pkgbot3r@...

Never Lose Credentials

Everything you need to persist and reuse disposable identity credentials.

AES-256 encrypted
One-click copy
Search & categorize
View Vault Docs

See It
in Action

Create a disposable identity, automate signup, extract the verification code, and save to vault, all from the terminal

Manage Credentials
Your Way

CLI commands, REST API, TypeScript SDK, and bulk operations

CLI Integration

Manage vault entries from the terminal. List, search, decrypt, and save credentials without leaving your workflow.

$ dna vault list --category dev-tools
  GitHub          bot7k4x@748392.best    dev-tools
  GitLab          cibot3r@748392.best     dev-tools
  npm             pkgbot9m@748392.best    dev-tools

$ dna vault get ve_Xm4kRt7p Site: GitHub Email: bot7k4x@748392.best Password: Kx9#mL2pQr4!vB7w Category: dev-tools
$ dna vault save --from ai_Kp9x --site GitHub ✓ Saved to vault: ve_Ab5nLw8q

REST API

Full CRUD plus bulk operations. Every endpoint returns structured JSON for easy parsing in any language.

POST/api/vaultSave credentials
GET/api/vaultList entries
GET/api/vault/:idDecrypt entry
PATCH/api/vault/:idUpdate metadata
DELETE/api/vault/:idDelete entry
POST/api/vault/bulk-deleteBulk delete
POST/api/vault/bulk-updateBulk categorize

Bulk Operations

Select multiple entries and update categories or delete in one request. Up to 100 entries per batch.

GitHubdev-tools
GitLabdev-tools
npmdev-tools
Twittersocial
Discordsocial
2 selectedSelect entries...

TypeScript SDK

Fully typed vault methods with IntelliSense support. Create, list, decrypt, and bulk-manage in a few lines of code.

client.vault.create(data)Save credentials
client.vault.list({ category })
client.vault.get(id)
client.vault.bulkUpdate(ids, cat)
View SDK Docs

10 Categories

Organize vault entries by purpose. Filter by category to find the right credentials instantly.

Social8 entries
Dev Tools12 entries
Testing5 entries
Gaming3 entries
Finance4 entries
Shopping6 entries
Work7 entries
Entertainment2 entries
News3 entries
Other1 entries

Export Anywhere

Export vault entries as JSON or CSV. Import into password managers or your own tooling.

.json.csv
[ { "site": "GitHub", "email": "bot7k..." } ]
Export as .json

Plan Comparison

The vault is available on Pro and Business plans. The only difference is the number of entries you can store.

Pro
Vault entries50
Bulk operations
Search & filter
JSON/CSV export
API + CLI access
Business
Vault entries500
Bulk operations
Search & filter
JSON/CSV export
API + CLI access

When you create an agent identity, it comes with a temporary email and password that expire with the inbox. If you used those credentials to sign up for a service, you'll lose access once the identity expires. The Agent Vault solves this by letting you save credentials persistently.

All vault data is encrypted at rest using AES-256-GCM with per-user derived keys. Only your authenticated session can decrypt the stored passwords and persona data. The encryption happens server-side before storage, and decryption only occurs when you explicitly request an entry's details.

Encrypted at Rest

Passwords and persona data are encrypted with AES-256-GCM using per-user derived keys. Only your authenticated session can decrypt them.

Save Before Expiry

One-click save from any active agent identity card. Captures email, password, and persona data before the identity expires.

Search & Categorize

Organize entries by category (social, dev-tools, testing, etc.) and search across site names, emails, and notes.

One-Click Copy

Copy email or password to clipboard instantly. No need to remember or type credentials manually.

CLI & API Access

Manage vault entries from the terminal with dna vault commands, or integrate programmatically via REST API and TypeScript SDK.

Export & Bulk Ops

Export entries as JSON or CSV. Bulk-update categories or bulk-delete up to 100 entries per request.

How It Works

  • Create an agent identity with a disposable email and encrypted password
  • Use the credentials to sign up for any service via browser automation or manually
  • One-click save from the dashboard, or programmatically via the API, SDK, or CLI
  • Credentials are encrypted server-side with AES-256-GCM before storage. Passwords never touch disk in plaintext
  • Organize entries with 10 categories (social, dev-tools, testing, finance, etc.) and free-text search
  • Decrypt on demand. Passwords are only revealed when you explicitly open an entry or call the get endpoint
  • Bulk operations let you re-categorize or delete up to 100 entries at once
  • Export to JSON or CSV for backup or import into external password managers

Frequently Asked Questions

How is vault data encrypted?
Each user gets a unique AES-256-GCM encryption key derived from the server secret and your user ID using HKDF. Passwords use the 'vault-credential' derivation purpose and persona data uses 'vault-persona'. The encrypted data is stored as base64 in the database and can only be decrypted by authenticated requests from your account.
What happens if I downgrade from Pro to Free?
Your vault entries remain stored but you won't be able to access them until you upgrade again. No data is deleted on downgrade.
How many entries can I store?
Pro plans support up to 50 vault entries. Business plans support up to 500. Each entry stores one email + password pair along with optional persona data and metadata.
Can I share vault entries with my team?
Not currently. Vault entries are encrypted with per-user keys and can only be decrypted by the account that created them. Team vault sharing may be added in a future update.
Can I export my vault data?
You can retrieve any entry via the API or CLI, which returns the decrypted credentials. Use the --json flag with the CLI to pipe entries into your own storage or password manager.

Start Saving Credentials

Create an agent identity, sign up for a service, then save the credentials to your encrypted vault.