# HashiCorp Vault

**Canonical:** https://apis.io/providers/vault/  
**Website:** https://www.vaultproject.io  
**APIs profiled:** 9

HashiCorp Vault is an open source tool for securely storing and accessing secrets. A secret is anything you want to tightly control access to, such as API keys, passwords, certificates, and more. Vault provides a unified interface to any secret while providing tight access control via policies and recording a detailed audit log. It supports dynamic secrets, data encryption, PKI, SSH certificate issuance, and identity-based access through a comprehensive REST HTTP API.

## Kin Score — 31.4 / 100 (thin)

Scored 2026-08-21 under rubric 0.12.0. Trend: flat (+0.5 from 30.9).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 28.9 |
| Governance | 13.6 |
| Contract Governance | 13.6 |
| Operational Transparency | 26.3 |
| Developer Ergonomics | 32.1 |
| Commercial Clarity | 26.3 |
| Access Clarity | 26.3 |

## Agent readiness — 41.9 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | verified |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (9)

- **Vault HTTP API** — The complete Vault HTTP API gives full access to all Vault operations via REST. Includes authentication method APIs (AppRole, LDAP, JWT, Kubernetes, AWS, Azure), secrets engine ...
- **HashiCorp Vault Auth Methods API** — Enable, disable, list, and configure authentication methods.
- **HashiCorp Vault Health API** — Check Vault health and initialization status.
- **HashiCorp Vault Leases API** — Look up, renew, and revoke leases for secrets and tokens.
- **HashiCorp Vault Policies API** — Create, read, update, delete, and list ACL policies.
- **HashiCorp Vault Secrets Config API** — Configure KV v2 engine settings such as max versions and CAS required.
- **HashiCorp Vault Secrets Data API** — Read, write, patch, and delete secret data versions in the KV v2 engine.
- **HashiCorp Vault Secrets Engines API** — Mount, unmount, list, and configure secrets engines.
- **HashiCorp Vault Secrets Metadata API** — Manage metadata and version history for KV v2 secrets.

## Agentic access (1)

- **Vault Agentic Access** — 25 operations · 17 acting · 3 human-in-the-loop

## Security (2)

- **Vault Authentication** — apiKey · 1 scheme
- **Vault Domain Security** — TLSv1.3 · HSTS · DMARC

## Plans (1)

- **Vault Plans Pricing**

## Use cases (7)

- **Application Secret Injection** — Inject database credentials, API keys, and config into applications at runtime via Vault Agent.
- **Kubernetes Secrets Management** — Replace Kubernetes secrets with Vault-managed secrets using the Vault Secrets Operator.
- **Database Credential Rotation** — Automatically rotate database credentials with dynamic secrets engine for zero-knowledge security.
- **PKI Automation** — Automate certificate lifecycle management for internal services and mutual TLS.
- **CI/CD Secret Injection** — Provide short-lived credentials to CI/CD pipelines via AppRole or GitHub Actions OIDC.
- **Secrets as Code** — Manage Vault configuration as code using the Terraform Vault provider.
- **Compliance and Audit** — Meet SOC 2, PCI-DSS, HIPAA, and FedRAMP requirements with immutable audit logs.

## Tags

DevOps, Encryption, Open-Source, PKI, Secrets Management, Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/vault/). Scores are computed from the provider's own public artifacts under a published rubric.