HashiCorp Vault (HCP)
Runner-up for agent secrets when HashiCorp is already the standard. Infisical remains the depot default for…
Runner-up for agent secrets when HashiCorp is already the standard. Infisical remains the depot default for agent DX; Doppler for pure SaaS; AWS SM for IAM-native shops. Strengths: The enterprise secrets standard (dynamic creds, encryption as a service, many auth methods); HCP removes most ops; OSS avoids lock-in; MCP server for agent-native secret fetch.
Lock-in risk: higher = more lock-in (worse). Overall already inverts this dimension.
Runner-up for agent secrets when HashiCorp is already the standard. Infisical remains the depot default for agent DX; Doppler for pure SaaS; AWS SM for IAM-native shops.
Strengths
- · The enterprise secrets standard (dynamic creds, encryption as a service, many auth methods)
- · HCP removes most ops; OSS avoids lock-in
- · MCP server for agent-native secret fetch
Weaknesses
- · Client-based HCP bills surprise teams used to Infisical/Doppler seats
- · DX is operator-grade, not agent-builder-grade
- · No simple public starter SKU
Pricing notes
As of 2026-09-14: OSS Vault self-host free (you operate it). HCP Vault Dedicated is usage-based: cluster hours by edition/size (Starter/Development/Essentials/Standard × XS–L) billed per minute, plus monthly unique Clients. Secondary 2026 guides cite Essentials Small ~$1.58–$1.60/hr (~$1.1k/mo) + ~$72.92 per active client/mo; Development ~$0.03/hr with a 25-client cap. Confirm live HCP portal — HashiCorp does not publish a single marketing rate card. Official Vault MCP server exists (GitHub/Docker) for agent tool access.
Sourced pricing
Contract status unavailable · no_sourced_price. Single normalized $/1M: null. Machine list: /api/pricing?provider=hashicorp-vault
No sourced SKU row. Notes above stay prose.
Community signals
Insight claims only — never mutate official scores. Outside reports: 0; seed examples: 0.
No insights yet. Submit a production claim →
All insights for this provider →