diff --git a/README.md b/README.md
index ea1e3d8..f2d7f56 100644
--- a/README.md
+++ b/README.md
@@ -40,6 +40,7 @@ KeyHacks shows ways in which particular API keys found on a Bug Bounty Program c
 - [Google Cloud Service Account credentials](#Google-Cloud-Service-Account-credentials)
 - [Google Maps API key](#Google-Maps-API-key)
 - [Google Recaptcha key](#Google-Recaptcha-key)
+- [HashiCorp Vault token](#HashiCorp-Vault-token)
 - [Heroku API key](#Heroku-API-key)
 - [HubSpot API key](#Hubspot-API-key)
 - [Instagram Access Token](#Instagram-Access-Token)
@@ -798,6 +799,11 @@ curl -X POST \
    jq --raw-output .api_token pivotaltracker.json
    ```
 
+## [HashiCorp Vault Token](https://www.vaultproject.io/api/auth/token)
+```
+curl -s -H "X-Vault-Token: <your_token>" "https://vault.example.com/v1/auth/token/lookup-self"
+```
+
 # Contributing
 
 I welcome contributions from the public.