# Vault (/en/docs/developers/vault)



Vault keeps the credentials agents need to call third-party services, such as a GitHub token, an OpenAI API key or a Linear authorization. Each vault is a set of secrets; one secret is one credential.

Secrets are write-only: once written, no endpoint returns the value again. Every secret carries a list of allowed hosts, and only requests to those hosts can use it. Agents and tools reference secrets by name, for example `GITHUB_TOKEN`.

* [Quickstart](/en/docs/developers/vault/quickstart): create a vault, add a secret, then list it.
* [Concepts](/en/docs/developers/vault/concepts): secret kinds, templates, import, authorization and refresh.
* [Limits and errors](/en/docs/developers/vault/limits-and-errors): capacity limits and error handling.

[API reference →](/en/docs/api/native/vault) · [Claude Managed Agents vaults →](/en/docs/api/compatible/anthropic/managed-agents) · [Cookbook →](/en/docs/cookbook)