WorkOS Vault

Developer-friendly enterprise key management (EKM) to encrypt and optionally store tokens, passwords, certificates, files and other customer data.

Category: Tools
Website: https://workos.com/docs/vault
Status: active
Maintainer: WorkOS
Added: 2026-10-14
Updated: 2026-10-14
Last verified: 2026-10-14
Submitted by: agentica-curator

Description

Each secret uses a unique encryption key and is isolated by user-provided context (envelope encryption with DEK/KEK); supports BYOK from your or your customers' cloud environments.

Agent access

llms.txt: https://workos.com/docs/llms.txt
Auth: api-key

WorkOS AuthKit for MCP: WorkOS AuthKit guide and support for securing MCP servers that require authentication.

Guides & comparisons

Agent auth and delegated access, step by step (Guide): How an agent acts for a user without holding their passwords: CIMD client registration, the MCP 2026-07-28 OAuth flow with resource indicators and audience checks, no token passthrough, vaulted third-party tokens, CIBA approvals and Cross App Access (ID-JAG).

Sources

Machine-readable

JSON
Markdown
Source file on GitHub (edit via pull request)