FyVault

Quick Start

Get FyVault running in 5 minutes. Install the SDK, connect a provider, or use FyVault.auto() for zero-config setup.

Install the SDK

Node.js

Terminalbash
npm install @fyvault/sdk

Python

Terminalbash
pip install fyvault
app.tstypescript
import { FyVault } from "@fyvault/sdk";
const fv = FyVault.auto();
const db = await fv.secrets.getValueByName("DATABASE_URL");
app.pypython
from fyvault import FyVault
fv = FyVault.auto()
db = fv.secrets.get_value_by_name("DATABASE_URL")

Or connect third-party providers directly — see Provider Connect.

1

Create an Account

Sign up at fyvault.com/auth/register.

2

Create Your Organization

After login, you'll be prompted to create an organization. This is your workspace for secrets, devices, and team members.

3

Set Up Vault Encryption

Go to Settings → Vault Encryption → Set up a vault passphrase.

Warning: This passphrase encrypts your secrets in the browser. If you lose it, your secrets cannot be recovered. There is no reset mechanism.
4

Create Your First Secret

Go to Secrets → Create Secret.

Example: OpenAI API Key

TypeAPI Key
NameOPENAI_API_KEY
Valuesk-proj-your-actual-key
Target Hostapi.openai.com
HeaderAuthorization
TemplateBearer {{value}}
5

Register a Device

Go to Devices → Register Device.

Get your device fingerprint:

Terminalbash
sudo cat /sys/class/dmi/id/product_uuid
6

Assign Secrets to the Device

Open the device detail page → Assigned Secrets Assign Secret → Select OPENAI_API_KEY.

7

Install the Agent

On your server:

Terminalbash
curl -fsSL https://get.fyvault.com | bash -s -- \
  --token YOUR_DEVICE_TOKEN \
  --cloud https://api.fyvault.com/api/v1
8

Update Your .env

Before

.envenv
OPENAI_API_KEY=sk-proj-your-actual-key

After

.envenv
OPENAI_API_KEY=FYVAULT::openai_api_key
9

Start Your App

Your app runs exactly as before. The FyVault agent handles everything transparently — intercepting outbound connections and injecting real credentials at runtime.