OpenBao logo
Security · self-hosted

OpenBao in one click.

OpenBao is a secrets management and encryption service you can run on your own machine. Launch it in Even Stacks in one click, serve it over trusted HTTPS, and let your AI agents operate it.

What is OpenBao?

OpenBao is the community-maintained fork of HashiCorp Vault for securely storing, accessing, and managing secrets, API keys, certificates, and encryption keys. It provides dynamic secrets, leasing, and audit logging.

CategorySecurity
Default port8200
Container imageopenbao/openbao:latest
Official siteopenbao.org

Run OpenBao in Even

Even Stacks launches OpenBao as a managed container on your own machine. No compose files, no manual setup.

  1. Open the Even Stacks panel in Even. The container engine starts on demand.
  2. Find OpenBao in the one-click services and click Launch.
  3. Even pulls the image, starts it on port 8200, and serves it over trusted HTTPS at https://openbao.localhost.

Drive OpenBao with your AI agents

Even ships an MCP, so any agent you run inside Even (Claude Code, Codex, and more) can operate OpenBao directly, at both the UI level and the container level.

Through the Even MCP an agent can run commands inside it, manage entries, and read its logs. It runs commands inside the container, reads its logs, and for web apps opens and clicks through the interface in Even's own browser pane. Ask once, for example "set up OpenBao and get it ready", and the agent handles it end to end.

How agents reach it: Open http://localhost:8200 for the web UI with the root token set via BAO_DEV_ROOT_TOKEN_ID. Use the CLI with `docker exec -it openbao bao secrets enable -path=kv kv-v2` to enable a KV secrets engine. Set BAO_SKIP_VERIFY=true when connecting from outside.

More Security services

Other one-click services you can launch in Even Stacks.