Vault keeps encrypted credentials in a workspace and records their use. These guides cover the current console and supported clients. You need a GhostStack account with Vault access; reading this documentation does not enable the service.

Store your first credential

1. Sign in through Identity. Choose Vault in the top-left tool menu. If it is missing, ask your workspace administrator to check your service access.
2. Check the workspace name before entering any data. Navigation explains the two menus and account controls.
3. Open Credentials, choose a folder, then + New credential.
4. Choose the credential type, enter its fields, and check the name, description and storage location. Keep secrets out of names, tags and descriptions.
5. Select Store credential. Open the saved record and check its public connection details. The value is encrypted; it is not printed on the detail page.
6. Use the labelled Copy action only when you need the value, or connect an approved client.

Choose a task

• Find something: read the overview, browse and search, or organize folders and tags.
• Control access: share a credential or folder, manage Vault roles, or inspect activity.
• Maintain credentials: replace a value, archive or restore, and check plan usage.
• Use a client: Claude Code and MCP, CLI, or TypeScript SDK.

Screenshots use fictional accounts and credentials. Your counts and actions depend on your workspace, permissions and plan. Select any screenshot to open the full-size image. On a phone, use Navigation above this article to choose another guide.

Screen reference

Open this screenshot at full size.