Node.js SDK

npm install sanctum-ai

const { SanctumVault } = require('sanctum-ai');
 
// Create a new vault
const vault = SanctumVault.init('/tmp/my-vault', 'strong-passphrase');
 
// Store a credential
vault.store('OPENAI_API_KEY', 'sk-abc123...', 'my-agent');
 
// Retrieve it
const secret = vault.retrieve('OPENAI_API_KEY', 'my-agent');
console.log(`Got: ${secret}`);
 
// List all credentials
const creds = vault.listCredentials('my-agent');
for (const cred of creds) {
  console.log(`  ${cred.path} (accessed ${cred.accessCount} times)`);
}
 
// Check the audit trail
const entries = vault.auditLog();
for (const entry of entries) {
  console.log(`[${entry.agentName}] ${entry.action} → ${entry.resource}`);
}
 
// Delete a credential
vault.delete('OPENAI_API_KEY', 'my-agent');

import { SanctumVault, CredentialInfo, AuditEntryJs } from 'sanctum-ai';
 
const vault = SanctumVault.init('/tmp/my-vault', 'strong-passphrase');
vault.store('OPENAI_API_KEY', 'sk-abc123...', 'my-agent');
 
const creds: CredentialInfo[] = vault.listCredentials('my-agent');

const vault = SanctumVault.open('/tmp/my-vault');
vault.unlock('strong-passphrase');
 
const secret = vault.retrieve('OPENAI_API_KEY', 'my-agent');
 
// Lock when done
vault.lock();

vault.store('OPENAI_API_KEY', 'sk-abc123...', 'chatbot-v2', {
  policyName: 'openai-chatbot-only',
  principal: 'agent:chatbot-*',
  actions: ['retrieve'],
  maxLeaseTtl: 3600,
});
 
const decision = vault.checkPolicy('chatbot-v2', 'OPENAI_API_KEY');
console.log(`Allowed: ${decision.allowed}`);
 
const denied = vault.checkPolicy('rogue-agent', 'OPENAI_API_KEY');
console.log(`Allowed: ${denied.allowed}`);  // false

const testVault = SanctumVault.openInMemory('test-pass');
testVault.store('TEST_KEY', 'test-value', 'test-agent');

const { SanctumVault } = require('sanctum-ai');
const { openai } = require('@ai-sdk/openai');
 
const vault = SanctumVault.open('~/.sanctum');
vault.unlock(process.env.VAULT_PASSPHRASE);
const apiKey = vault.retrieve('OPENAI_API_KEY', 'vercel-agent');
 
const provider = openai({ apiKey });