Pqvault
by pdaxtcommunityv2.1.0
1
PQVault is a post-quantum secrets management solution designed for AI agents, allowing them to access API keys securely without exposing them. It provides controlled access, usage tracking, and audit logs.
From the registry: Post-quantum secrets manager for AI agents. ML-KEM-768 + X25519 + AES-256-GCM.
Install & configure
Prerequisites
- requiredBuild from source (Rust/Cargo)Clone repo and build with cargo build --release
$ git clone https://github.com/pdaxt/pqvault-rs.git && cd pqvault-rs && cargo build --release - requiredInitialize vaultRun init to generate keypairs and store master password in Keychain
$ ./target/release/pqvault init
Install in your client
Paste into the AI you're chatting with — it will figure out the rest
Please install the `pqvault` MCP server into my current AI client (that's you).
Required prerequisites (do these first if not already done):
- **Build from source (Rust/Cargo)** — Clone repo and build with cargo build --release Run: `git clone https://github.com/pdaxt/pqvault-rs.git && cd pqvault-rs && cargo build --release`
- **Initialize vault** — Run init to generate keypairs and store master password in Keychain Run: `./target/release/pqvault init`
Canonical MCP server config (stdio transport):
- command: `/path/to/pqvault-rs/target/release/pqvault`
- args: ["serve"]
Note: Post-quantum secrets management for AI agents. No npx/uvx path - must build from Rust source. macOS Keychain used for master password. Replace command path with actual binary location.
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.Note: Post-quantum secrets management for AI agents. No npx/uvx path - must build from Rust source. macOS Keychain used for master password. Replace command path with actual binary location.
Tools (10)
vault_get
Retrieve a secret (rate-limited, usage-tracked, audit-logged)
vault_list
List all secrets with metadata — no values exposed
vault_health
Expired keys, rotation warnings, usage spikes, idle key alerts
vault_usage
Per-key analytics: requests, rate limit %, cost, callers
vault_dashboard
Full markdown dashboard with all keys, costs, limits
vault_add
Add secret with auto-detected provider, category, and rate limits
vault_rotate
Rotate secret value, reset timestamp, clear alerts
vault_delete
Remove secret and clean up project references
vault_proxy
Proxy API calls — key auto-injected, never exposed to caller
vault_write_env
Write .env file to disk — values never returned to caller
Environment variables
ANTHROPIC_API_KEYrequiredAPI key for accessing Anthropic servicesDetails
- Language
- Rust
- Released
- Mar 7, 2026
- Last commit
- Apr 13, 2026
- Registry name
- io.github.pdaxt/pqvault