Secrets / Vaults Connectors

Secrets and vault connectors enable AI agents to interact with credential management platforms for secret retrieval, rotation orchestration, and vault administration. These connectors are tightly coupled with the ARX credential management subsystem (INV-005), providing the underlying mechanism through which other connectors retrieve their own authentication material.

Due to the sensitivity of secrets management, operations in this category carry elevated risk classifications. Read operations for secret metadata are LOW risk, but secret value retrieval is MEDIUM risk. Write operations such as secret creation, rotation, and deletion are HIGH to CRITICAL risk.

Connector Operations Risk Levels Description
HashiCorp Vault 26 LOW, MEDIUM, HIGH, CRITICAL HashiCorp Vault operations for secret engine management, secret read/write, dynamic credential generation, policy administration, and audit device configuration
1Password 21 LOW, MEDIUM, HIGH 1Password Connect operations for vault management, item retrieval, secret creation, document storage, and access grant administration
Bitwarden 22 LOW, MEDIUM, HIGH Bitwarden Secrets Manager operations for secret management, project administration, service account configuration, and access policy management