# cuora

> secrets broker for agents — sealed, not spilled

cuora:// references in code, env vars at runtime, an audit trail for every materialization

## Table of Contents

### Tutorials

- [Your first secret](/cuora/tutorials/first-secret.md)

### How-to

- [Add a secret](/cuora/how-to/add-a-secret.md)
- [Inject secrets into a process](/cuora/how-to/inject-into-a-process.md)
- [Rotate a secret](/cuora/how-to/rotate-a-secret.md)
- [Route envs to vaults](/cuora/how-to/route-envs-to-vaults.md)
- [Cache a remote vault locally](/cuora/how-to/cached-vaults.md)
- [Deploy a secret to a sink](/cuora/how-to/deploy-to-a-sink.md)
- [Guardrails for agents](/cuora/how-to/guardrails-for-agents.md)
- [Cloudflare Worker setup](/cuora/how-to/cloudflare-worker-setup.md)

### Reference

- [Command-Line Help for `cuora`](/cuora/reference/cli.md)
- [Config — `cuora.toml`](/cuora/reference/config.md)
- [Audit events](/cuora/reference/audit-events.md)
- [The `cuora serve` protocol](/cuora/reference/serve-protocol.md)
- [Environment variables](/cuora/reference/env-vars.md)
- [Crate API](/cuora/reference/crate-api.md)

### Explanation

- [Architecture](/cuora/explanation/architecture.md)
- [Threat model](/cuora/explanation/threat-model.md)
- [Boundaries](/cuora/explanation/boundaries.md)
- [Crypto model](/cuora/explanation/crypto-model.md)
- [The worktree model](/cuora/explanation/worktree-model.md)

### Other

- [Getting started](/cuora/getting-started.md)
- [Untitled](/cuora/public/api/static.files/SourceSerif4-LICENSE-a2cfd9d5.md)