A credential vault built for agency-to-client handoff.
AES-256-GCM credentials, scoped per client and workflow. Clients add their own keys via a 7-day link; you never see plaintext.
n8n stays where it is. Autom8 sits in front.
Acme Agency is asking you to connect three accounts for their automation.
Every safeguard a client would audit, without asking you to ship compliance docs.
AES-256-GCM at rest
Every credential encrypted with its own random IV before it touches the database. Keys never hit disk in plaintext, never appear in logs, never leak into error traces.
Time-limited share links
Generate a 7-day, 100-view link for your client. They submit credentials through a branded form. The link auto-expires. Revoke any time.
Global vs. workflow-scoped
Shared credentials at the client level for services used everywhere (e.g. a Gmail account), or workflow-specific secrets for one-off integrations.
SSRF-protected n8n calls
The client library blocks outbound requests to internal IP ranges by default. Your customer’s n8n instance stays on the safe side of the firewall.
Zero plaintext in the database
Even with full DB access, an attacker sees ciphertext. The encryption key is a separate env secret, rotatable without data migration.
Full audit trail
Every credential creation, update, rotation, and deletion is logged with timestamp, user ID, and resource scope. The trail your future auditor will want.
Frequently asked questions
Pick the plan that fits your roster
Yearly billing · 17% off vs monthly · No free trial · Cancel from dashboard.
