Skip to main content
Initialize an encrypted vault for an agent. You must call this before saving or retrieving any secrets. Tool name: initialize_vault

​
Parameters

​
agentId
string
required
A unique identifier for the agent. Use the same ID consistently across sessions.
​
intent
object
required
Describes why this tool is being called. Required for audit logging.

​
Response

Returns a text confirmation: "Vault initialized."

​
Example

{
  "agentId": "agent-abc123",
  "intent": {
    "message": "Setting up vault before provisioning identity",
    "subject": "VAULT",
    "action": "CREATE"
  }
}
A vault can only be initialized once per agentId. Calling initialize_vault a second time for the same agent will return an error.