Vault Python Packages

hvac

:lock: Python 3.X client for HashiCorp Vault

dynaconf

Configuration Management for Python ⚙

saltext-vault

Salt Extension for interacting with HashiCorp Vault (or OpenBao)

paypal-server-sdk

The PayPal Server SDK provides integration access to the PayPal REST APIs.

vault-kv-client

Typed HashiCorp Vault KV helper library for Python

dcert

A Rust CLI and MCP server for X.509 certificate analysis, format conversion, and key verification. Reads certificates from PEM files or HTTPS endpoints. Validates TLS connections, checks revocation status, converts between PFX and PEM formats and integrates with AI-powered IDEs via the Model Context Protocol (MCP) and Vault.

python-dotenv-vault

Load environment variables from encrypted .env.vault files

vaultspec-core

Decision-driven harness for coding agents, and humans.

ops-cli

Ops - cli wrapper for Terraform, Ansible, Helmfile and SSH for cloud automation

hive-vault

Context infrastructure for AI-assisted development — on-demand Obsidian vault access via MCP

markdown-vault-mcp

Generic markdown vault MCP with hybrid search

cdktf-cdktf-provider-vault

Prebuilt Terraform CDK (cdktf) provider for vault.

hashivaultlib

An extension to hvac, implementing recursive removal and retrieval of secrets and models for tokens and policies.

nautobot-secrets-providers

Nautobot Secrets Providers Plugin.

aps-vault

Self-hosted secrets manager for one team: envelope encryption (Argon2id + AES-256-GCM), folder-scoped service tokens, machine API, TOTP, audit, MCP server. Python/Node/Go/Java clients.

sgit-ai

repo for SGit-AI__CLI

keystash

Zero-plaintext secret layer for AI agents & MCP — one local encrypted file, Touch ID unlock, plaintext-leak hunter. | AI 助手/MCP 的零明文密钥层：本地单文件加密、Touch ID 解锁、明文泄漏清剿

dagster-hashicorp

Package for integrating Hashicorp Vault with Dagster.

concealer

🔐 The local-only AI secret manager for the AI-coding era with MCP, CLI, Web UI, TUI, Chrome Extension and Mobile App. No cloud, No telemetry, No account.

key-amnesia

key-amnesia is now Vahta — see github.com/vahta-team/vahta. Archived signpost, no code.

ranbval-sdk

Secrets that refuse to be stolen. Sealed API keys that decrypt only on your allowlisted repo — and raise a security error if anything tries to print, iterate, or read them. Every access attempt alerts the owner.

agileupstate

Python module to manage AgileUP system state.

navig-vault

Agentic runtime for operators who want to manage servers, databases, containers, tunnels, and workflows from one place — with AI assistance, not AI dependence.

envex

envex is an extended environment variable interface including .env file support and reading values from HashiCorp vault