hvac

HashiCorp Vault API client

hvac Permissive license Apache-2.0 AGING ★ 1,314 v2.4.0 released 2025-10-30

Install

hvac on PyPI

pip

pip install hvac

uv

uv add hvac

poetry

poetry add hvac

Package facts

License	Apache-2.0 (permissive)
Python support	supports the current Python release (<4.0,>=3.8)
Install friction	low — pure-Python wheel
Runtime dependencies	1 — requests
Maintenance	aging — 287 days since the last release
Last repo commit	2026-01-06
First released	2015-05-17
Popularity	one of the top 1,000 most-downloaded packages on PyPI (30-day window, as of 2026-08-13)
Known vulnerabilities	none known (OSV.dev, checked 2026-08-13)

Evidence: hvac-2.4.0-py3-none-any.whl

Keywords: hashicorp, vault

License :: OSI Approved :: Apache Software LicenseProgramming Language :: PythonProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.8Programming Language :: Python :: 3.9Programming Language :: Python :: Implementation :: CPython

About hvac

from the package's own PyPI description — quoted content, verbatim

hvac

Header image (image)

HashiCorp Vault API client for Python 3.x

Build (image) Lint (image) codecov (image) Documentation Status (image) PyPI version (image) Twitter - @python_hvac (image) Gitter chat (image)

Tested against the latest release, HEAD ref, and 3 previous minor versions (counting back from the...

Read as markdown · JSON record · Source repository · Homepage · Docs

AI interpretation — verify before relying

AI-generated interpretation of the package facts above; every digit, version, license, or vulnerability id it cites is grounded in the facts already shown on this page

hvac is a Python client library for HashiCorp Vault, enabling programmatic access to Vault's secrets management and authentication APIs.

Low friction: pure Python wheel with a single runtime dependency (requests). Maintenance is aging—287 days since last release—but the repository remains active with recent commits and 1314 stars, suggesting community investment despite the release gap.

Apache-2.0 is permissive; you may use, modify, and distribute hvac freely in commercial and private projects provided you retain license notices.

Usage

pip install hvac
import hvac
client = hvac.Client()
secret = client.secrets.kv.read_secret_version(path='secret/data/my-secret')

Requires a running Vault server and appropriate authentication credentials (token, role, etc.) configured.

Verdict: hvac is a well-established, low-friction Vault client suitable for production use. No known vulnerabilities, permissive licensing, and broad Python 3.8+ support make it a solid choice. The 287-day release lag warrants monitoring for security patches, but active repository maintenance and top-1000 popularity suggest ongoing stewardship.

Needs verification

Whether the 287-day release gap reflects a stable, feature-complete state or deferred maintenance requiring urgent patches.
Performance and compatibility claims against Vault v1.4.7+ and the latest Vault versions listed in the description.
Specific Vault server configuration and authentication setup requirements for the usage example.

vault api client pythonhashicorp vault pythonsecrets management clientvault authentication pythonvault secret retrievalvault kv store clientpython vault integration