I have added an Agent Vault service for Openrouter, but I don't see how to edit it in case I set it up correctly. Clicking on it does not open it up for verification or editing.

Hi @martin434, can you try clicking on the three dots on the right edge?

Thanks I found it..it's barely visible on my screen. I need to get to LensCrafters haha. Any chance of adding Openrouter to the service Presets?

I’ll note that down as a feedback, and improve the UI

OK I will. Is there anywhere in the documentation about using it with various Hermes agent profiles?

A user or a machine (in your case agent) is considered as one identity: infisical.com/docs/…/overview But it doesn’t mean that you cannot shared the same machine identity for all your agents. If all your agents require the same access then use one machine identity for all of them. If you think that sharing the same access could lead to security concerns like an agent getting more access than needed, then better create one per agent, or per agent group.

So are you saying Agent Proxy doesn't work with Hermes profiles _profile name that is appended when Hermes looks for keys in the .env file?

We currently don’t have documentation around Hermes profile. But a question for you: Are you looking to pull the actual secrets to the hermes host?

Proxy like Agent Vault. I've never seen Agent Proxy

It’s mostly the same, you configure the secrets and services on Infisical and then you use infisical CLI to run the proxy and to run the agent

Hermes appends _profile name when looking in .env file for API keys when setting up multiple agents on a server. Does Agent Vault/Agent Proxy work with this?

Since you don’t want the actual secrets to be pulled in on your Hermes host, we don’t need to worry about the .env here

If it was a single agent using the default profile it would be SLACK_BOT_TOKEN and with a separate agent/profile called Coder Hermes would look for SLACK_BOT_TOKEN_CODER

You can just do this: 1. Create folders in Infisical for each of your hermes profiles, let’s say

/hermes/default

,

/hermes/coder

, etc. 2. Create secrets and proxied services there 3. Run this command on the proxy machine:

infisical secrets agent-proxy start

4. Start your agent:

infisical secrets agent-proxy connect -- coder gateway start

OK i will try... Is most of the Agent Proxy setup similar to Agent Vault?

Since hermes is creating commands per profile you just need to wrap the gateway start of those profiles/commands with agent proxy

Ok thanks Saif!

OK. I just installed Agent Vault yesterday. I will unistall and go with Agent Proxy

Yes, we will be adding guides soon to Agent Proxy.

Great. I look forward to it!

Hey @martin434, there are two ways to set this up. I’d go with the first unless your SDK is picky about key formats. Either way, you’ll want the credential in place first. Go to Credentials, click Add credential, stay on the Static tab, and set the key to

OPENROUTER_API_KEY

with your real

sk-or-v1-…

value. Way 1: Bearer (what I’d recommend) Head to Services, click Add service, and fill in: • Name:

openrouter

• Host pattern:

<http://openrouter.ai|openrouter.ai>

• Authentication: Bearer • Token credential key:

OPENROUTER_API_KEY

Your code doesn’t need the real key at all. If an SDK refuses to start without one, just put any dummy string in there, since we replace the whole Authorization header anyway. Way 2: Substitution (only if a client validates the key format) Same as above, but set Authentication to Passthrough, then expand URL Substitutions and click Add substitution: • Replace:

sk-or-v1-000000000000000000000000

(deselect

path

and

query

, then select

header

) • With value of:

OPENROUTER_API_KEY

Then use that fake key as your env var, and we’ll swap it for the real one on the way out. Both approaches send the exact same real header upstream, so it comes down to preference. Way 1 is a little less to maintain.

Thank you! I have Openrouter working via Agent Vault. Now going to tackle the gateway.

@martin434 we also released a new version to add a preset for openrouter to agent vault

Thank you @Saif Rahman!