First-time setup
- Install AgentVault in Chrome.
- Open AgentVault from the Chrome toolbar.
- Create or unlock your vault.
- Add your secrets, such as
OpenAI API KeyorGitHub Token. - Ask your local AI agent to set up the companion using
https://getagentvault.app/SKILL.md.
Grant a session
- Open AgentVault and unlock the vault.
- Choose how many minutes the agent should have access.
- Click Session.
- Click Copy Agent Instructions.
- Paste the instructions into Codex, Cursor, VS Code, Claude Code, or another local tool.
The session token is temporary. You can revoke it early from AgentVault, and it expires automatically when the timer runs out.
Start the companion manually
If the Session button is greyed out after setup, start the companion from the install folder:
Windows: cd "$env:LOCALAPPDATA\AgentVaultCompanion\companion" node server.js Mac: cd "$HOME/Library/Application Support/AgentVaultCompanion/companion" node server.js Linux: cd "$HOME/.local/share/agentvault-companion/companion" node server.js
Codex, VS Code, Cursor, Claude Code, CLI
Use the copied instructions. They include the live token, exact secret names, and this local HTTP call:
POST http://127.0.0.1:3747/secret
Content-Type: application/json
{ "token": "SESSION_TOKEN", "name": "OpenAI API Key" }
Claude Desktop, Cursor, Windsurf with MCP
After the companion is installed by the hosted setup skill, MCP-compatible tools can use the AgentVault MCP server from the installed companion folder.
{
"mcpServers": {
"agentvault": {
"command": "node",
"args": ["FULL_PATH_TO_AGENTVAULT_COMPANION/mcp/server.js"]
}
}
}
The MCP tools are list_secrets and get_secret.
Advanced: direct Chrome messaging
AgentVault also has a developer-oriented browser messaging path for localhost pages. This is useful for diagnostics or custom browser-based integrations, but most users should use the companion or MCP path above.
chrome.runtime.sendMessage(
AGENTVAULT_EXTENSION_ID,
{ type: "av_getSecret", token: "SESSION_TOKEN", name: "OpenAI API Key" },
(response) => console.log(response)
);
A small local diagnostic page is available in the repo at docs/agent-test.html.
Mac
Agent-assisted setup
A local AI agent can set up the companion on Mac using the hosted skill if Node.js 18+ is installed. A polished signed Mac app is not part of the MVP.
What will not work
- iPhone and iPad cannot run the local companion or MCP server.
- Cloud-only agents cannot call your computer's
127.0.0.1without a future secure tunnel feature. - Locked-down work computers may block local scripts or startup services.
- Chromebooks are not part of the MVP companion flow.
Troubleshooting
The Session button is greyed out
Install or start AgentVault Companion using the hosted setup skill. Then refresh AgentVault or wait a few seconds for the sidepanel to detect it.
127.0.0.1 refused to connect
The companion is not running. Ask your local agent to rerun the setup skill or start the companion from its installed folder.
The agent cannot find a secret
Use the exact name shown in AgentVault. Names are case-sensitive.