OpenBot Ships Vault for Agent Credentials

OpenBot is treating credential handling as a core agent-safety boundary, though the design still depends heavily on server permissions and browser isolation.

• –Agents receive references or limited metadata instead of passwords and full card numbers
• –First-time card use requires explicit owner approval, reducing the risk of unauthorized purchases
• –Vaults can connect to external providers such as 1Password, Bitwarden, and HashiCorp Vault
• –Developers should audit tool exits and agent permissions carefully, since approved tools are where secrets are ultimately injected
• –The feature strengthens OpenBot’s local-first positioning but is not a substitute for a dedicated enterprise secrets manager