Resolve a secret by name using the configured backend (local vault, 1Password, Bitwarden, or env vars). Returns the decrypted value at runtime. The secret value is never visible in the LLM conversation transcript — it is resolved just-in-time for the current operation.

Store a secret in the encrypted vault. The value is encrypted with AES-256-GCM before storage. The secret value is never visible in the LLM conversation transcript after this call.

List all stored secret names (names only — values are never revealed in this listing).

Replace real values in your .env file with deterministic fake values. Real values are encrypted and backed up to the vault. AI agents reading .env files will only see fakes. Use unsandbox_env to restore real values.

Restore real .env values from the vault. Reverses the sandbox operation.

Delete a secret from the vault.

View the audit log of secret resolutions, stores, and deletes. Shows who accessed which secret and when.

Generate a TOTP 2FA code for a stored secret. Returns the current 6 or 8 digit code and seconds remaining until rotation.

Store a TOTP configuration from an otpauth:// URI (from QR code scan or manual entry).

List all stored TOTP configurations.

Delete a stored TOTP configuration.

Create an encrypted, expiring share link for a secret. The secret is encrypted into the URL fragment and never sent to any server.

Receive and decrypt a shared secret from a share URL fragment.

Check dead man's switch status — days until vault access is released to designated contacts.

Check in to reset the dead man's switch timer.

Create a new shared team vault (encrypted SQLite). Requires a passphrase.

Push a local secret to the shared team vault.

Import all secrets from the team vault into your local vault.

List all secret names in the team vault.

Resolve (decrypt) a single secret from the team vault.

Delete a secret from the team vault.

Check SSO/OIDC authentication status for team vault access.

Register an AI agent in the Know Your Agent registry, bound to a human sponsor. Returns the agent identity and its Ed25519 private key, which the agent holds to sign its own actions.

Append a signed action to the tamper-proof agent ledger. Each entry is hash-chained and Ed25519-signed, so any later edit or reorder is detectable.

Verify the integrity of the agent action ledger by re-walking the hash chain and signatures. Returns the first sequence that fails if the ledger was tampered with.

List all agents in the Know Your Agent registry.

Export the agent action ledger as a compliance report (JSON or CSV) with human-sponsor attribution.