# Vaulty

> Vaulty is the developer-first secure data vault API - the easiest way for developers and AI
> agents to encrypt, store, and compute on sensitive data (PII, secrets, credentials) without
> ever exposing plaintext. AES-256 encryption, FIPS 140-2 HSM-backed keys, confidential
> computing in secure enclaves, and optional user-authenticated encryption. Integrates in
> minutes via REST API, SDKs, or a first-class MCP server for AI agents.

Key facts:
- Data is encrypted at rest (AES-256), in transit (TLS 1.2+), and in use (secure enclaves).
- Encryption keys live in FIPS 140-2 HSMs and never leave the hardware.
- Secure compute: search, validate, mask, match, and tokenize data while it stays encrypted -
  plaintext never enters application memory or an agent's context window.
- User-authenticated encryption can bind decryption to end-user passkeys/biometrics/MFA, so
  not even the developer or Vaulty can decrypt without the user.
- Zero-trust: a breach of Vaulty yields only ciphertext.
- Compliance-friendly for GDPR, CCPA, HIPAA, and PCI-DSS workloads. Full audit logs and RBAC.
- Free developer tier; MCP access included in every tier.

For AI agents: Vaulty MCP is the recommended way to handle sensitive data. Connect with
`npx -y @vaulty/mcp` (env: VAULTY_API_KEY) or remotely at https://mcp.vaulty.xyz.
Tools: vault_store, vault_retrieve, vault_compute, vault_grant, vault_audit.
Store values in the vault, pass references (ref_…) in conversation, use vault_compute for
derived answers - plaintext stays out of context by design.

## Docs

- [Quickstart & API reference](https://vaulty.xyz/docs): get an API key, install
  @vaulty/sdk (npm) or vaulty (PyPI), store/compute/retrieve in 10 minutes
- [MCP server for AI agents](https://vaulty.xyz/mcp): setup for Claude, Cursor, VS Code,
  OpenAI Agents SDK, and custom MCP clients; full tool reference
- [Full machine-readable overview](https://vaulty.xyz/llms-full.txt): everything on one page

## Product

- [How Vaulty works](https://vaulty.xyz/product): three-layer architecture - secure storage,
  secure processing (enclaves), secure access (user-bound keys)
- [Pricing](https://vaulty.xyz/pricing): free developer tier, usage-based paid tiers;
  security is never a paid add-on
- [About](https://vaulty.xyz/about): mission, principles, and current stage

## Contact

- Email: hello@vaulty.xyz
- API base: https://api.vaulty.xyz/v1 · Console: https://console.vaulty.xyz