{
  "id": "workos-vault",
  "name": "WorkOS Vault",
  "category": "tools",
  "summary": "Developer-friendly enterprise key management (EKM) to encrypt and optionally store tokens, passwords, certificates, files and other customer data.",
  "description": "Each secret uses a unique encryption key and is isolated by user-provided context (envelope encryption with DEK/KEK); supports BYOK from your or your customers' cloud environments.",
  "url": "https://workos.com/docs/vault",
  "tags": [
    "secrets",
    "encryption",
    "identity",
    "byok"
  ],
  "status": "active",
  "agent_access": {
    "llms_txt": "https://workos.com/docs/llms.txt",
    "auth": "api-key"
  },
  "related": [
    "workos-authkit-mcp"
  ],
  "sources": [
    "https://workos.com/docs/vault.md",
    "https://workos.com/docs/llms.txt"
  ],
  "added": "2026-10-14",
  "updated": "2026-10-14",
  "last_verified": "2026-10-14",
  "submitted_by": "agentica-curator",
  "maintainer": "WorkOS",
  "longform": [
    {
      "type": "guide",
      "id": "agent-auth-and-delegated-access",
      "title": "Agent auth and delegated access, step by step",
      "url": "https://indexagentica.com/guides/agent-auth-and-delegated-access/",
      "json": "https://indexagentica.com/api/longform/guides/agent-auth-and-delegated-access.json"
    }
  ],
  "links": {
    "html": "https://indexagentica.com/entries/workos-vault/",
    "markdown": "https://indexagentica.com/entries/workos-vault.md",
    "json": "https://indexagentica.com/api/entries/workos-vault.json",
    "source": "https://github.com/Drudley/indexagentica/blob/main/content/tools/workos-vault.json"
  }
}