This will let your agents use credentials without sharing them with the model. For example, you can connect Codex to the vault using MCP and give it access to placeholder credentials to log in to a website. When Codex tries to log in, Agent Vault's proxy will replace the placeholder with the real credentials. Codex will never see the password, and the agent can authenticate normally.