Symaira Vault

Symaira Vault

[](https://github.com/danieljustus/symaira-vault/actions/workflows/ci.yml) [](https://github.com/danieljustus/symaira-vault/releases/latest) [](https://opensource.org/licenses/Apache-2.0) [](https://pkg.go.dev/github.com/danieljustus/symaira-vault)


A modern, secure command-line password manager (`symvault`) written in Go. Uses [age](https://age-encryption.org/) for encryption with built-in MCP server support for AI agent integration.


**Status:** pre-1.0 — the CLI surface and vault format are stabilizing under [SemVer](https://semver.org/); see [CHANGELOG.md](CHANGELOG.md) for the release history.

**Safety Notice**: Symaira Vault manages sensitive secrets. Use at your own risk, keep tested backups of your vault, and verify recovery before relying on it for critical credentials.

Features

• Modern Encryption: age (X25519 + ChaCha20-Poly1305)
• TOTP Support: Store and generate TOTP codes
• Clipboard Auto-Clear: Automatic clearing after timeout
• Autotype: Cross-platform automatic password entry (macOS, Linux, Windows)
• Secret Execution: Run commands with vault secrets injected as environment variables
• Session Caching: OS keyring with 15-minute TTL
• Git Integration: Automatic commits and sync
• Multi-User Vaults: age recipients for shared access
• MCP Server: stdio and HTTP for AI agent integration with scoped token management
• MCP Slash Commands: add-credential, rotate-credential, find-and-use, share-credential — guided workflows surfa