Secure Agent Access

Password Vaults For AI Agents

BotRelay is a password manager built for AI agents. Give agents their own vault, only the secrets they need, and the tools for secure access.

BotRelay empowers your agents to do more, while keeping your secrets safe.

Agent Install

pip install botrelay

from botrelay import Client
c = Client()  # env keys
github = c.secrets.get("github")

The API returns ciphertext. BOTRELAY_VAULT_KEY never leaves the agent.

How It Works

Control Agent Reach

Create a vault and drop in your secrets — passwords, API keys, and contact records. Each secret is encrypted in the browser before it's stored as ciphertext. Create multiple vaults, control which agents can access each one, and keep exposure narrowly scoped

Zero-Knowledge By Design

Your master password never hits our servers. Keys are derived in the browser, and secrets are encrypted with Argon2id and XChaCha20-Poly1305 before anything reaches our servers. We never see your keys or plaintext secrets. Only you and your agents have access.

Agents Fetch, Then Decrypt

An agent token decides which vault your agent can open. A separate vault key decrypts secrets locally on the agent. Ciphertext can travel; plaintext never does. Scoping stays narrow because you control which vault an agent can access.