Secure credentials. Connected agents.
Clavio is a hosted vault for SSH keys, API tokens, and database credentials — plus Vault, Memory, Agent, and Code Bridge MCP so AI tools can use secrets, recall context with hybrid search, and pass ephemeral messages without plaintext in chat.
Free plan: 1 credential + 1 MCP token + Agent Memory + Code Bridge
production-api
api_key
MCP Hub
secrets:read · http:call
Audit trail
1 secret
Built for security-first teams
Everything you need to store, share with agents, and audit sensitive credentials.
Envelope encryption
Each secret is encrypted with a unique data key, wrapped by your vault master key. Plaintext never touches the database.
Four MCP surfaces
Vault, Memory, Agent, and Code Bridge — scoped Sanctum tokens, install from the Hub. Agents call tools; they never receive raw secret values in responses.
Agent Memory
Persist project rules, structure notes, and hard-won fixes. Store, update, append, export/import, and forget via Memory MCP — separate from credential tools.
Hybrid memory search
Free plans search title, tags, and body with UTF-8 keywords. Pro adds embeddings + RRF ranking so semantic recall finds the right rule even when wording differs.
WordPress, DB, mail & OTP
Publish posts and media, list or moderate comments, run SELECT-only DB queries, send SMTP mail, call HTTP APIs, and fetch TOTP codes — credentials stay on Clavio and never appear in tool output.
Full audit trail
Every reveal, MCP call, and SSH execution is logged with result, IP, and timestamp for compliance and forensics.
Mandatory MFA
TOTP-based multi-factor authentication is required on every tenant account. Recovery codes included.
SSH, Deploy, Docker & cloud
Run SSH and registered deploys, Docker exec, Cloudflare DNS, S3 list/get/put, and list secrets nearing expiry — credentials stay on Clavio and never appear in tool responses.
Event webhooks
Optional HTTPS webhooks for product events (memory stored, deploy failed, secret used) — SSRF-hardened, metadata only, never secret values.
Clavio Code Bridge
Ephemeral messages between coding agents
When Cursor, OpenCode, and Hermes need to hand off a task, Code Bridge delivers short-lived messages — deleted on read — with wake signals so peers know mail is waiting.
Delivery queue
FIFO Redis lists store the payload until session_poll or session_wait. Messages expire by TTL and never accumulate.
SSE wake
Open GET /mcp/code-bridge/listen after session_listen. On notifications/clavio/codebridge_message, call session_poll for the body — never in the wake event.
Session webhooks
Agents that accept HTTPS hooks (e.g. Hermes) register a URL per session. Same metadata-only wake, then poll for the payload.
Install clavio-code-bridge from the MCP Hub alongside Vault, Memory, and Agent. Supports file_transfer blobs, session_ping, and session_wait as fallback if listen is unavailable.
Up and running in minutes
Three steps from signup to your first MCP-connected agent.
Sign up free
Create your account in seconds. Full vault access from day one.
Store secrets
Add SSH servers, API keys, databases, WordPress sites, Docker hosts, Cloudflare DNS, S3 credentials, or generic secrets through the web panel.
Connect MCP
Copy all four server configs from the Hub into Cursor, Claude, or OpenCode — Vault, Memory, Agent, and Code Bridge.
Simple, transparent pricing
Start free. Upgrade when you need unlimited credentials and tokens.
Free
Perfect for trying Clavio and connecting your first agent.
- 1 active credential
- 1 MCP token
- 1 project + 25 agent memories
- MFA & audit logging
- All secret categories
Pro
Launch priceFor power users and teams that need unlimited scale.
- Unlimited credentials
- Unlimited MCP tokens
- Unlimited projects & memories
- Hybrid semantic memory search
- Priority support
- All Free features
Frequently asked questions
What do I get on the free tier?
One active credential, one MCP token, one project, and up to 25 agent memories — you choose what to store. All vault features (MFA, audit, every secret category) are included at no cost.
Is MFA really required?
Yes. Every tenant account must set up TOTP-based MFA before accessing the vault. This protects your secrets even if your password is compromised.
How does MCP integration work?
Clavio exposes four MCP endpoints: Vault (/mcp/vault) for secrets and execution, Memory (/mcp/memory) for Agent Memory, Agent (/mcp/agent) for orchestration, and Code Bridge (/mcp/code-bridge) for ephemeral cross-tool messages. Create a token with scoped abilities, install all four servers from the Hub, and agents pick the right surface — without receiving plaintext secrets.
What is Code Bridge?
Code Bridge is an ephemeral message bus between coding tools and orchestrators (Cursor, OpenCode, Hermes). Messages are deleted on read. Peers wake via SSE listen or an optional per-session HTTPS webhook (metadata only), then call session_poll for the payload. session_wait remains a fallback if listen is unavailable.
What is Agent Memory?
Agent Memory stores durable notes — project rules, structure, difficulties, and user-marked facts — scoped by project, user, or platform-wide global (admin). Agents search and store via the Clavio Memory MCP. Free plans use keyword search over title, tags, and body; Pro adds hybrid semantic ranking with embeddings when enabled.
How does memory search work?
Search runs through the same engine in the web panel and MCP. Results can include a relevance score and match type (keyword, semantic, or hybrid). Pro hybrid search uses Reciprocal Rank Fusion so strong semantic matches are not drowned out by raw keyword counts.
What can agents do besides SSH?
With the right secret flags and token abilities, agents can create or rotate secrets, fetch OTP codes, publish WordPress posts and media, list or moderate comments, introspect database schemas, run SELECT-only queries, send email over SMTP, call HTTP APIs, exec in Docker containers, manage Cloudflare DNS, use S3-compatible storage, and list secrets nearing expiry — without returning passwords or keys in the tool response.
Can agents run SSH and deploys for me?
Yes. You register SSH servers and approved deploy commands in the vault; agents run them through MCP. Passwords and private keys stay on Clavio — they never appear in the tool response.
What is the Agent runtime?
It is the Clavio Agent MCP for orchestration — routing intent, recalling context, and coordinating Vault and Memory. Agents get guidance and tools, not your raw credentials.
What are event webhooks?
Optional HTTPS notifications when something happens in your account (for example a memory stored or a deploy failed). Payloads are metadata only — never secret values.
How does Pro billing work?
Pro is an annual subscription billed through Stripe Checkout. You can manage or cancel your subscription from the billing portal at any time.
Can I upgrade later?
Absolutely. Start on Free and upgrade to Pro whenever you need more credentials, MCP tokens, projects, or memories. Your existing secrets are preserved.
Where are my secrets stored?
Secrets are envelope-encrypted at rest using AES-256-GCM on Clavio's hosted service. The vault master key stays in the Clavio server environment and never appears in agent responses.