vaultwarden
Just-in-time API keys for AI agents - and any other process you route through it: the caller only ever sees a placeholder.