Skip to main content
Vault is OpenLIT’s secrets management system. Instead of embedding API keys like OPENAI_API_KEY directly in your code or distributing them via environment variables, you store them once in Vault and retrieve them at runtime from any application. This lets your team share secrets securely, rotate keys in one place, and avoid credentials spreading across repos and configs.

​
Key features

  • Centralised storage — create, edit, and manage secrets for all your applications from a single UI
  • Tag-based retrieval — assign tags to secrets and fetch only the ones relevant to a given service
  • Environment injection — automatically set fetched secrets as environment variables in your running process
  • SDK and API access — retrieve secrets from Python, TypeScript, or any HTTP client

​
Get started

1

Browse existing secrets

Open OpenLIT and click Vault in the left navigation. The list view shows all secrets currently stored, along with their keys and tags.
2

Create a secret

  1. Click Create new in the top-right corner.
  2. Enter the key — this is the environment variable name your application expects (e.g. OPENAI_API_KEY).
  3. Enter the value — the actual secret string.
  4. Add one or more tags to group related secrets (e.g. production, openai). Tags let you fetch a filtered subset of secrets at runtime.
  5. Click Save.
Secret values are stored encrypted. You cannot view a secret’s value after saving — only update or delete it.
3

Retrieve secrets in your application

1

Create an API key

Your application needs an OpenLIT API key to authenticate requests to Vault.
  1. In OpenLIT, navigate to API Keys.
  2. Click Create API Key.
  3. Enter a name, then click Create.
  4. Copy the key and store it securely — you will not be able to view it again.
You can also set the API key via the OPENLIT_API_KEY environment variable so you do not have to pass it in every call.
2

Fetch secrets

Install the OpenLIT SDK if you have not already:
Fetch all secrets and optionally inject them as environment variables:
Output
When should_set_env is True, each key in the response is also set as an environment variable in the current process — so subsequent calls to os.environ["OPENAI_API_KEY"] work without any additional code.

​
Python SDK parameters

​
string
Base URL of your OpenLIT instance. Defaults to the OPENLIT_URL environment variable.
​
string
OpenLIT API key for authentication. Defaults to the OPENLIT_API_KEY environment variable.
​
string
Fetch a single secret by its key (e.g. OPENAI_API_KEY). Omit to fetch all secrets.
​
string[]
Fetch only secrets that have all of the specified tags assigned.
​
boolean
When True, sets each returned secret as an environment variable in the current process.

Dashboards

Create custom visualizations with flexible widgets, queries, and real-time AI monitoring

Prompt Hub

Version, deploy, and collaborate on prompts with centralized management and tracking

OpenGround

Compare cost, duration, and response tokens across different LLMs to find the most efficient model