robocorp-vault

What it is and what it does

robocorp-vault is a client library for interacting with Robocorp's Control Room Vault, a centralized secrets store. It abstracts the API calls needed to fetch and update secrets, presenting them as dictionary-like objects with named keys and values. The library is designed for use within Robocorp automation workflows, where sensitive data like database credentials, API keys, or login information need to be stored securely and retrieved at runtime without hardcoding them into scripts.

The package depends on cryptography for secure operations, pyyaml for configuration, requests for HTTP communication with Control Room, and tenacity for retry logic. It supports Python 3.10 through 3.14 and has been actively maintained since its initial release in 2023, with recent updates as of mid-2026.

Use it for:

• Retrieve login credentials for web automation tasks without embedding passwords in code.
• Store and fetch API keys for third-party service integrations in Robocorp workflows.
• Manage database connection strings centrally and update them without redeploying automation.
• Implement secret rotation by updating vault entries and having tasks pick up new values on next run.
• Share sensitive configuration across multiple automation tasks via a single vault entry.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Provides read and write access to secrets stored in Robocorp Control Room's Vault, enabling retrieval and management of sensitive values like passwords and credentials.

Yes, if you are building automation with Robocorp Control Room. The library is actively maintained, has no known vulnerabilities, low install friction, and a permissive license. It is the standard way to access Control Room secrets from Python code. Not relevant for non-Robocorp workflows.

Install

robocorp-vault on PyPI

pip install robocorp-vault

uv add robocorp-vault

poetry add robocorp-vault

Installing robocorp-vault

Before you install

Low install friction with a pure-Python wheel distribution. Actively maintained with recent commits and a stable dependency set of four well-established packages (cryptography, pyyaml, requests, tenacity).

License in practice

Apache-2.0 is permissive, allowing commercial and private use with minimal restrictions; you must include a copy of the license and state significant changes.

Quickstart

pip install robocorp-vault

from robocorp import vault

secret = vault.get_secret("login_credentials")
username = secret["username"]

Requires Python 3.10 or later; Control Room integration assumes access to a Robocorp Control Room instance or local development setup.

Verify before relying

• Whether local development workflows support offline secret storage or require Control Room connectivity
• Performance characteristics when retrieving or writing large numbers of secrets

Package facts

Evidence: robocorp_vault-1.4.0-py3-none-any.whl

Tags

More Security packages