Zero-knowledge vault
Secrets and context are encrypted before they leave your device. Rivault says its servers only ever see ciphertext, and the vault is designed so the company cannot read your data by default.
Rivault
Rivault is a secure vault for AI agents that stores secrets and context for controlled access. It lets you approve agent requests and redacts released values after a task ends.
Secure secret storage for AI agent workflows
Rivault is a secure vault for AI agents that stores secrets, personal details, and context for controlled agent access. The product is built around zero-knowledge encryption, so data is encrypted before it leaves your device and Rivault's servers only see ciphertext by default.
The core workflow is simple: create a vault, add the items you want an agent to use, connect an AI tool such as OpenClaw or Claude, and approve access when the agent needs something sensitive. Rivault is designed for tasks like booking travel, filling forms, or completing purchases without repeatedly typing private information into chat windows.
Key features
One-tap agent authorization
When an agent needs a sensitive item, Rivault asks for authorization and lets you approve access with a passkey. The home page presents this as a one-tap flow for completing agent tasks.
Per-item access control
You can decide which vault items agents may use and whether access requires ad hoc approval. That lets you separate always-available context from items that should only be released case by case.
Post-task redaction
Released values are intended to be temporary. Rivault's desktop app redacts accessed secrets from the agent transcript, memory, and logs after the task ends.
Agent connection options
The quick start says you can connect Rivault to OpenClaw, Claude, or ChatGPT through API keys or MCP, with one-click install and no code required.
Desktop app-based setup
The setup flow uses an email account, a passkey, and the desktop app for vault calls and redaction. The quick start notes macOS support for the desktop app at present.
Common use cases
Travel booking
Use Rivault to give a travel-booking agent access to passport details, frequent-flyer numbers, seat preferences, and other trip context without copying it into a chat.
Online checkout
Store shipping addresses, card details, and size preferences so an agent can complete online purchases with a single authorization step.
Medical appointments
Keep insurance information, health history, and pharmacy preferences available for appointment booking or refill workflows that need repeated personal details.
Restaurant reservations
Share dietary restrictions, party size, and neighborhood preferences so an agent can book a table without asking you to re-enter the same information each time.
Home services and scheduling
Provide address, home specifications, calendar availability, and payment method for cleaners, plumbers, and contractor booking flows.
Pros and Cons
Pros
- Encrypts data before it leaves the device, with a zero-knowledge design.
- Lets users approve agent access rather than exposing secrets continuously.
- Supports temporary access and post-task redaction of released values.
- Provides a free Basic tier and a Pro tier for heavier use, based on the homepage pricing section.
- Documents a quick setup path with passkey-based login and agent connection steps.
Cons
- The quick start notes that the desktop app is macOS only for now.
- Support is shown most clearly for OpenClaw and Claude; ChatGPT is mentioned on the home page as coming soon, so coverage may be limited by tool and setup.
- The pricing page was not available, so plan details beyond the homepage summary could not be verified.
FAQ
How do you set up Rivault?
Rivault is set up by creating a vault with an email address and registering a passkey. The quick start says the passkey becomes the only key to the vault, and it is not stored by Rivault.
Which AI tools can Rivault connect to?
The quick start says Rivault can connect to OpenClaw, Claude, and ChatGPT, and mentions connecting through API keys or MCP. The home page also says it works with OpenClaw and Claude, with ChatGPT marked as coming soon.
How does Rivault protect stored secrets?
Rivault stores items in a zero-knowledge vault. Data is encrypted in the browser or on the device before it leaves your device, and Rivault says its servers only see ciphertext by default.
What happens when an agent requests a secret?
When an agent needs access to a vault item, Rivault sends an authorization request and you approve with a passkey or Face ID-protected flow. Released values are meant to be temporary and are redacted from local transcripts, memory, and logs after the task ends.
Does Rivault have a free plan?
The home page shows a free Basic tier with up to 10 items in the vault and a Pro tier at $9.90 per month with unlimited items. The pricing page itself was not available.
Quick Facts
- Category
- AI security / secret vault
- Primary use
- Store and release sensitive context to AI agents with permission
- Core security model
- Zero-knowledge encryption and local redaction
- Supported workflow
- Passkey authorization for agent access
- Platforms noted
- Web plus macOS desktop app for redaction and MCP calls
- Pricing snapshot
- Free Basic tier; Pro at $9.90/month per homepage pricing section
Alternativas a Rivault
CreateOS Sandbox
CreateOS Sandbox is an isolated compute environment for running code and agent workloads inside Firecracker micro-VMs. It is designed for workflows that need machine-level isolation, private networking between sandboxes, and programmatic control through SDK, CLI, or MCP.
AakarDev AI
AakarDev AI helps teams manage AI provider access, project-level setups, logs, and analytics from one dashboard. It supports BYOK workflows and lists providers including OpenAI, Google Gemini, Anthropic, Groq, Mistral AI, and Perplexity AI.
ByteAsk
ByteAsk is a terminal-first AI coding agent for C and C++ that edits repositories and verifies changes with the real compiler, debugger, sanitizers, and tests before showing a diff. It offers a free tier plus paid plans, with editor connectors and zero-retention handling described in the source.
Goldfish
Goldfish is an AI memory app for macOS that helps you reply, write, summarize, and continue using the context already on your Mac. It stores memory locally and writes in your tone.
Lasso
Lasso is an ecommerce product data platform for enriching catalog records, processing supplier files, generating product content, and monitoring competitors. It combines a web app with a REST API, SDK, and MCP server for teams and developers.
ArtDeck
ArtDeck is a visual reference board app for iPhone, iPad, and Mac that lets artists collect mixed reference material on one canvas and study it with ToolBox lenses. It works offline, supports optional iCloud sync, and is sold as a one-time purchase with no account required.