BlackVault
BlackVault protects AI API credentials with rate limits, budget caps, model restrictions, and an emergency kill switch.
About BlackVault
BlackVault is an open-source API key firewall for AI agents. Agents use per-agent bvt_ proxy tokens instead of real provider keys, with requests routed through BlackVault to OpenAI, Anthropic, Google, or Nebius.
It applies per-token rate limits, budget caps, and model restrictions, and revoked tokens return 401 without rotating the provider key. It includes an OpenAI-compatible gateway at /api/v1/chat/completions that routes by model prefix and translates request and response formats for Anthropic and Google.
Key features
- Proxy bvt_ tokens replace direct sharing of provider keys
- Per-token rate limits, budget caps, and model restrictions
- Token revocation returns 401 without key rotation
- OpenAI-compatible gateway auto-routing by model name
- Request and response translation for Anthropic and Google
- Remote MCP server access using vaulted keys
Best for: Developers who share OpenAI, Anthropic, Google, or Nebius keys with AI agents or OpenAI-compatible tools.
Good for
- Agents never see the real provider key
- One bvt_ token can access multiple providers with automatic routing
- Works with existing OpenAI-compatible SDKs, agent frameworks, and IDE tools
BlackVault at a glance
- Category
- Privacy & Security › Security Tools
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
BlackVault alternatives
Tools and sites you could use instead, ranked by how closely they match.
Cynative provides security agents that audit cloud, code, and runtime environments for exposure and privilege issues.
Open source
24 alternatives
Add a proof-of-work CAPTCHA system to an application using the mCaptcha backend component.
FreeOpen source
24 alternatives
Cap offers an open-source, self-hosted CAPTCHA alternative using proof-of-work and instrumentation challenges.
Open source
24 alternatives
Build self-hosted, privacy-respecting CAPTCHA flows with the LibreCaptcha framework.
Open source
24 alternatives
Run a privacy-focused home security camera system with support for multiple USB or Raspberry Pi cameras.
Open source
24 alternatives
Cap provides a self-hosted, open source alternative to CAPTCHA challenges for websites.
Popular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
BlackVault FAQ
How does BlackVault protect the real API key?
Agents use a bvt_ token and BlackVault proxies the request to the provider; agents never see the real key.
What happens when a token is revoked?
Killing the token causes instant 401 responses for that token, with no provider key rotation needed.
How do I use different providers through one endpoint?
Send requests to /api/v1/chat/completions with a bvt_ token. BlackVault routes by model prefix, including gpt-*, o1*, o3*, claude-*, gemini-*, deepseek-ai/*, and meta-llama/*, and translates formats for Anthropic and Google.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.