I will be running multiple Hermes agents (profiles) and gateways. Are there any considerations when creating Agent Vault Services if I am using multiple Hermes agent profiles, or is it just when creating credentials that I need to append the _profile for each Hermes agent? Any assistance with using Agent Vault with multiple Hermes agents with their own API keys would be appreciated. Thanks in advance!

Hey hey! Since you have multiple gateways you'll be running, I would give each gateway an agent token to a vault. You can still use the same service in agent vault and grant each gateway the ability to proxy through that vault. You ALSO have the option to give each agent its own separate vault. So each agent will have one token scoped to one vault, that vault with agent / profile specific credentials. Let me know if this helps or if you have any other questions. I'd be happy to further assist!

Hello, this is the video I'm using to set up Agent Vault with Hermes. Its a great video! I will try your suggestions! Thank you!

Checking!

Ok I will try that. Thanks.

NP. Let me know!

Hello @Jake (Infisical) Hope you're having a great day! I will be trying the multiple gateways tomorrow and will let you know. When using Slack, there are two tokens - SLACK_BOT_TOKEN and SLACK_APP_TOKEN. Can both configured in the Agent Vault Service? I have successfully implemented the Slack BOT Token, but how would I configure the Slack APP token in the AV service so I don't store it in the Hermes .ENV file? Would I just add it as another substitution for the same Slack service, and how would it be configured? We are also looking at using the TencentDB Agent Memory provider proxy running on the Hermes server (for Hermes) but I see from first glance that it stores API Keys in .env and config.yaml files. If you get a moment, can Agent Vault also be used to protect the TencentDB API Keys, especially if running on the Hermes server? github.com/TencentCloud/TencentDB-Agent-Memory and regolo.ai/tencentdb-agent-memory-the-complete-guide-to-persistent-memory-for-hermes-and-openclaw-with-zero-data-retention#… Thanks in advance!

Hey @martin434 sorry for the late response here. Both of those can indeed be configured in the AV service. You will use passthrough with substitution as one of them will be in the body, correct!