robocorp-vault
Robocorp Control Room Vault API integration library
Decision gist · record as of 2026-08-14
Yes, if you are building automation with Robocorp Control Room. The library is actively maintained, has no known vulnerabilities, low install friction, and a permissive license. It is the standard way to access Control Room secrets from Python code. Not relevant for non-Robocorp workflows.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python 3.10 or later; Control Room integration assumes access to a Robocorp Control Room instance or local development setup.
- Low install friction with a pure-Python wheel distribution.
- Actively maintained with recent commits and a stable dependency set of four well-established packages (cryptography, pyyaml, requests, tenacity).
License · maintenance · safety
Apache-2.0 (permissive) — Apache-2.0 is permissive, allowing commercial and private use with minimal restrictions; you must include a copy of the license and state significant changes.
last release 2026-03-13 (154 days) · last repo commit 2026-07-24 · 646 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 675,245 downloads/mo, #5,385 on PyPI
Alternatives
Verify before relying
pip install robocorp-vault
from robocorp import vault
secret = vault.get_secret("login_credentials")
username = secret["username"]- Whether local development workflows support offline secret storage or require Control Room connectivity
- Performance characteristics when retrieving or writing large numbers of secrets
What it is and what it does
robocorp-vault is a client library for interacting with Robocorp's Control Room Vault, a centralized secrets store. It abstracts the API calls needed to fetch and update secrets, presenting them as dictionary-like objects with named keys and values. The library is designed for use within Robocorp automation workflows, where sensitive data like database credentials, API keys, or login information need to be stored securely and retrieved at runtime without hardcoding them into scripts.
The package depends on cryptography for secure operations, pyyaml for configuration, requests for HTTP communication with Control Room, and tenacity for retry logic. It supports Python 3.10 through 3.14 and has been actively maintained since its initial release in 2023, with recent updates as of mid-2026.
Use it for
- Retrieve login credentials for web automation tasks without embedding passwords in code.
- Store and fetch API keys for third-party service integrations in Robocorp workflows.
- Manage database connection strings centrally and update them without redeploying automation.
- Implement secret rotation by updating vault entries and having tasks pick up new values on next run.
- Share sensitive configuration across multiple automation tasks via a single vault entry.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you are building automation with Robocorp Control Room.
The library is actively maintained, has no known vulnerabilities, low install friction, and a permissive license. It is the standard way to access Control Room secrets from Python code. Not relevant for non-Robocorp workflows.
Install
robocorp-vault on PyPI
Before you install
Low install friction with a pure-Python wheel distribution. Actively maintained with recent commits and a stable dependency set of four well-established packages (cryptography, pyyaml, requests, tenacity).
Requires Python 3.10 or later; Control Room integration assumes access to a Robocorp Control Room instance or local development setup.
License in practice
Apache-2.0 is permissive, allowing commercial and private use with minimal restrictions; you must include a copy of the license and state significant changes.
Quickstart
pip install robocorp-vault
from robocorp import vault
secret = vault.get_secret("login_credentials")
username = secret["username"]Verify before relying
- Whether local development workflows support offline secret storage or require Control Room connectivity
- Performance characteristics when retrieving or writing large numbers of secrets
Package facts
| License | Apache-2.0 permissive |
| Python support | Supports the current Python release <4.0,>=3.10 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 4 packagescryptographypyyamlrequeststenacity |
| Maintenance | Actively maintained 154 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 675,245 / month, #5,385 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | License :: OSI Approved :: Apache Software LicenseProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14 |
Evidence: robocorp_vault-1.4.0-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “robocorp vault secrets”
- robocorp-vaultProvides read and write access to secrets stored in Robocorp Control…
- robocorpA meta-package bundling five core Robocorp libraries—tasks, logging,…
- hvachvac is a Python client library for HashiCorp Vault that enables…
Give your agent the search over MCP, or paste the wish link into any chat.
More Security packages
Provides Python bindings to the FreeDesktop.org Secret Service API for securely storing and retrieving passwords and secrets through GNOME Keyring, KWallet, or KeePassXC.
MSAL for Python handles OAuth2 and OpenID Connect authentication with Microsoft identity services, managing token acquisition, caching, and refresh for applications integrating with Microsoft Entra ID, Microsoft Accounts, and Azure AD B2C.
joserfc implements JOSE standards (JWS, JWE, JWK, JWT, and related RFCs) for signing, encrypting, and managing JSON-based cryptographic tokens in Python.
Authlib provides a complete implementation of OAuth 1.0, OAuth 2.0, and OpenID Connect 1.0 for building both authentication clients and servers, with built-in support for JWS, JWK, JWA, and JWT standards.
Provides low-level CFFI bindings to the official Argon2 password hashing algorithm for use by libraries and applications that need direct access to Argon2 without higher-level abstractions.
ADAL for Python authenticates applications with Azure Active Directory to obtain tokens for accessing Azure AD-protected resources.
Install only if maintaining existing code that already depends on it, and plan a migration.
See also robocorp-storage · robocorp-workitems · robocorp · saltext.vault · azure-keyvault-secrets · onepassword · onepasswordconnectsdk · keepercommander · onepassword-sdk · keeper-secrets-manager-core