scanner docs insights pricing sign in

Setup Guide

Protect every API key in your project in under 2 minutes.

Getting Started Managing Keys

Getting Started

1

Sign up

Create a free account — no credit card required.

Free tier includes 3 keys and 10,000 proxy calls per month. No expiry.

2

Protect your keys

Run one command in your project directory.

$ npx @vaultproof/init
VaultProof — scanning .env...
Found 3 API keys:
  ✓ OPENAI_API_KEY         (OpenAI)
  ✓ STRIPE_SECRET_KEY     (Stripe)
  ✓ ANTHROPIC_API_KEY     (Anthropic)
Done. Your .env uses one project ID for everything:
  vp-proj-abc123

Each key is Shamir-split in your terminal. The plaintext never leaves your machine. Your .env is rewritten with one project ID. Your code doesn't change.

3

Deploy

Copy your new env vars to your hosting platform. None of them are secrets.

# Vercel / Railway / Netlify / Fly / etc.
VAULTPROOF_PROJECT_ID=vp-proj-abc123
OPENAI_BASE_URL=https://init.vaultproof.dev/p/openai/v1
OPENAI_API_KEY=vp-proj-abc123
STRIPE_BASE_URL=https://init.vaultproof.dev/p/stripe
STRIPE_SECRET_KEY=vp-proj-abc123

These are all public identifiers — safe to commit. Your real keys exist only as encrypted Shamir shares on the proxy.

Growing provider support. 250 provider signatures, including OpenAI, Azure OpenAI, Anthropic, Google/Gemini, DeepL, MiniMax, Voyage AI, Jina AI, AI21, AssemblyAI, Hume AI, RunPod, Browserbase, Stripe, Chargebee, Adyen, Twilio, Telnyx, Vonage, MessageBird, Plivo, Paystack, Lemon Squeezy, Groq, Mistral, Together, Fireworks, DeepSeek, xAI, OpenRouter, Resend, SendGrid, Linear, Notion, Figma, Asana, ClickUp, monday.com, Todoist, Coda, Shortcut, GitHub, GitLab, Bitbucket, Jira, Zendesk, Freshdesk, Netlify, Render, Heroku, Railway, Fly.io, DigitalOcean, Linode, Vultr, Hetzner, Scaleway, Fastly, HCP Terraform, Pulumi, npm Registry, CircleCI, Buildkite, Semgrep, Qdrant, Turso, Meilisearch, Typesense, Elasticsearch, Directus, Strapi, Hygraph, DatoCMS, fal.ai, Serper, Make, n8n, Axiom, InfluxDB, Rollbar, BugSnag, Codecov, BrowserStack, Auth0, FusionAuth, Aiven, CockroachDB Cloud, DataStax Astra, Redis Cloud, ClickHouse Cloud, Razorpay, Mollie, GoCardless, Mercado Pago, Wise, Shippo, EasyPost, ShipEngine, Front, Help Scout, Calendly, Typeform, Productboard, Dropbox, Box, Pinata, DeepInfra, Baseten, Cartesia, Unstructured, Luma AI, Portkey, Scale AI, Braintrust, Eden AI, VirusTotal, IPinfo, Apollo, Buttondown, Close, Greenhouse Harvest, Xendit, Midtrans, Coinbase Commerce, Lokalise, Crowdin, Sendbird, Mux, bunny.net, Prerender.io, ImageKit, SambaNova, NVIDIA NIM, FriendliAI, Hyperbolic, Vapi, Retell AI, Rev AI, Speechmatics, Gladia, Soniox, Resemble AI, Infobip, Mailchimp Marketing, Fauna, Zilliz Cloud, Pipedream, Attio, Recurly, Phrase Strings, Transifex, RevenueCat, Qovery, Northflank, Koyeb, Deno Deploy, Snyk, Doppler, PagerDuty, Grafana, Honeycomb -- plus custom APIs via npx @vaultproof/init custom, vault-only runtime secrets via npx @vaultproof/init secrets add, and Ansible/Terraform secrets via npx @vaultproof/init netops.

That's it. Your app is protected. ↓ Come back here when you need to add or rotate keys.

Managing Your Keys

Add a new key

Added a new provider to your app? Protect it.

From the terminal

Add the new key to your .env, then run init again. It detects the new key and adds it to your existing project.

npx @vaultproof/init

From the dashboard

Click + on your project, paste the key. Provider is auto-detected from the key's shape.

Open Keys Dashboard →

Rotate a key

Provider rotated your key? Update VaultProof in 30 seconds. Your project ID stays the same — zero code changes.

  1. 1 Get the new key from the provider's dashboard (OpenAI, Stripe, etc.)
  2. 2 Click Rotate on the key in your dashboard, paste the new value
  3. 3 Done. Zero code changes. Zero redeployments. Every app using this project ID automatically uses the new key.
npx @vaultproof/init

Read the docs · Manage your keys