AkurAI Build
Sign in with AkurAI ID
Menu

AkurAI-Build

public

Latest change e11509261b6a2aa4ea9ef67250b0be01bfb4f53b - Restore paths swept in from uncommitted WIP by Ólafur Búi Ólafsson

---
name: akurai-passvault
description: "Rust secrets vault: encrypted core, MCP server, CLI; OIDC+PKCE SSO"
---

# AkurAI-PassVault
Rust workspace (~/Projects/AkurAI-PassVault): passvault-core (encrypted), passvault-mcp, passvault-cli; Framework http/json/storage crates by path.
- Env names: AKURAI_PASSVAULT_HOST/_PORT/_DB/_TOKEN/_KEY; OIDC: AKURAI_IDP_ISSUER/_INTERNAL_URL/_CLIENT_ID/_CLIENT_SECRET/_REDIRECT_URI/_ALLOWED_GROUPS (PKCE + group authz).
- MCP endpoint https://akurai-passvault.olibuijr.com/mcp; nginx upstream 127.0.0.1:8102; health http://127.0.0.1:8102/api/health. CLI redacts password/token/secret in output.
- CI (main): clone Framework pinned; fmt/clippy/test; musl package -p akurai-passvault; deploy akurai-ec2 with env /etc/akurai-passvault/env, systemd + nginx, health-gated rollback, akurai-health-sweep. NEVER echo/log/commit secret values anywhere.