# Install vaulted with Homebrew Allows the secure storage and execution of environments. Version 3.0.0 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:vaulted ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install vaulted ``` Evidence: local Homebrew formula metadata ## Package facts - **Package key:** brew:vaulted - **Package manager:** Homebrew - **Package manager page:** - **Version:** 3.0.0 - **Source summary:** Allows the secure storage and execution of environments - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - vaulted (cli) - vaulted (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura ## Freshness - Page generated: 2026-07-08 - Package-manager version: 3.0.0 - Local data: ok - Upstream repository: https://github.com/miquella/vaulted - Upstream latest detected: v3.0.0 (current) - info: No package-manager update timestamp was available. ## Project history and usage `vaulted` is a small Go CLI for creating named vaults of secrets and spawning commands or shells with those secrets loaded into an isolated environment. ### Project history The public project history is sparse, but the official README defines the core idea clearly: users create vaults of related secrets, then spawn sessions from them. Vaults may hold environment variables, AWS credentials, and SSH keys, and spawned environments get temporary AWS credentials and a new SSH agent. ### Adoption history The tool belongs to the family of local developer-secret wrappers that reduce the need to keep credentials permanently exported in a shell. Its adoption appears niche and centered on users who want one command to switch AWS, SSH, and arbitrary environment-variable contexts. ### How it is used Typical usage starts with `vaulted add my-vault`, editing a vault interactively, then running `vaulted -n my-vault -- aws s3 ls` or `vaulted shell my-vault`. The README also documents an `env` subcommand intended for machine-readable integration with shells and utilities. Vault files follow the XDG Base Directory Specification, with user-written vault data stored under `$XDG_DATA_HOME/vaulted/`, typically `~/.local/share/vaulted/`, and session caches under `$XDG_CACHE_HOME/vaulted/`. ### Why package nerds care For package users, `vaulted` is notable less for a large ecosystem and more for being a compact Unix-style credential context switcher. It is adjacent to tools such as `aws-vault`, but broader in that it also handles arbitrary environment variables and SSH keys. ### Timeline - 2019 or earlier: Repository history and Go module packaging indicate an established Go CLI project. - Current README: Documents Homebrew installation, Go 1.12+ manual installation, XDG storage, AWS credentials, SSH-agent isolation, and spawned command workflows. ### Related projects - AWS CLI is a common consumer of spawned temporary AWS credentials. - SSH agent tooling is part of the spawned-environment model. ### Sources - Official GitHub README: https://github.com/miquella/vaulted ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Credential files - Unix: $XDG_DATA_HOME/vaulted/, ~/.local/share/vaulted/ ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** vaulted - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [doppler](https://www.automicvault.com/pkg/brew/doppler/) - Shares av.db curated category or tags: cli, environment-variables, secrets, secrets-management, security. - [teller](https://www.automicvault.com/pkg/brew/teller/) - Shares av.db curated category or tags: cli, environment-variables, secrets, secrets-management, security. - [chamber](https://www.automicvault.com/pkg/brew/chamber/) - Shares av.db curated category or tags: cli, go, secrets-management, security. - [envchain](https://www.automicvault.com/pkg/brew/envchain/) - Shares av.db curated category or tags: cli, environment-variables, secrets-management, security. - [fnox](https://www.automicvault.com/pkg/brew/fnox/) - Shares av.db curated category or tags: cli, secrets, secrets-management, security. - [git-secret](https://www.automicvault.com/pkg/brew/git-secret/) - Shares av.db curated category or tags: cli, secrets, secrets-management, security. - [infisical](https://www.automicvault.com/pkg/brew/infisical/) - Shares av.db curated category or tags: cli, environment-variables, secrets-management, security. - [ksops](https://www.automicvault.com/pkg/brew/ksops/) - Shares av.db curated category or tags: cli, secrets, secrets-management, security. ## Combined YAML source View the package source record on GitHub. [combined/vaulted.yml](https://github.com/automic-vault/db/blob/main/combined/vaulted.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - cross-ecosystem install command graph