|
Redan - Secure agent execution
Run AI coding agents inside microVMs with network-layer secret injection. Your agents run free. Your secrets stay put.
|
85 % |
Visit
|
|
hushenv — a local secret manager AI agents can't read
hushenv keeps your secrets encrypted in a local vault. Your .env files hold only references — safe to commit, safe for an AI agent to read.
|
85 % |
Visit
|
|
BipPass — End-to-end encrypted secrets manager for developers
A zero-knowledge secrets manager. Keep API keys and .env secrets out of your repo, your server and your AI coding tools — encrypted on your device.
|
84 % |
Visit
|
|
varsafe — the secrets manager for teams that ship with agents
One place for your team's secrets and environment variables. Developers, CI and AI coding agents get scoped access; every read and change is recorded.
|
84 % |
Visit
|
|
Propagate — Secure .env sharing for dev teams
Stop sending .env files over Slack. Propagate encrypts your environment variables locally and syncs them securely across your team via the CLI.
|
84 % |
Visit
|
|
Even we can't read your secrets — Stillvault
Human-in-the-loop secret management for AI agents. No secret leaves the vault without a named human approving it.
|
84 % |
Visit
|
|
EnvRelay: move your dev environment to a new machine
An Agent Skill that moves a development machine: dotfiles, credentials, git repositories, software and AI agent setup, carried in one encrypted file. You typ...
|
84 % |
Visit
|
|
kovra | kovra
Secrets your AI coding agents can use but never see. kovra is a local secrets manager that exposes scoped metadata over MCP — the plaintext never enters the...
|
84 % |
Visit
|
|
Encrypted storage for scripts and secrets · Secrets and Stuff
Keep deploy scripts, .env files and API keys encrypted, shared with exactly the people you choose. Free tools for sending a secret, generating passwords, and...
|
83 % |
Visit
|
|
Carapace: your agent uses the secret, never sees it
Carapace is an open-source secret broker for AI agents. Secrets decrypt only inside an attested Confidential VM in your own GCP project, are injected on the...
|
83 % |
Visit
|
|
Agent Secret — approve exactly what your agents unlock
Agent Secret is a local macOS approval broker for coding-agent secrets, backed by 1Password or Bitwarden Secrets Manager. Agents request exact secret referen...
|
83 % |
Visit
|
|
Venya - Zero-Knowledge Secrets for AI Agents and Humans
Venya lets AI agents execute commands on remote infrastructure using stored credentials - without ever seeing them. Zero-knowledge secret injection, FIDO2 au...
|
83 % |
Visit
|
|
Scilo — a secrets manager built for you and your AI agents
Scilo encrypts your API keys on your own device. Claude Code and Codex fetch them at runtime through a safe wrapper — the plaintext never enters an agent's c...
|
83 % |
Visit
|
|
enveigh: a native macOS secrets vault for the age of agents
enveigh keeps your API keys in the macOS Keychain and lets AI coding agents use them without ever seeing the plaintext. Local, encrypted, Touch-ID gated, aud...
|
82 % |
Visit
|
|
Puck — A curious little red teamer on every endpoint
Puck is an open-source, read-only investigative MCP server. Your AI gets read-only reach into every endpoint, gated by a typed allowlist embedded in both ser...
|
82 % |
Visit
|
|
Puck — A curious little red teamer on every endpoint
Puck is an open-source, read-only investigative MCP server. Your AI gets read-only reach into every endpoint, gated by a typed allowlist embedded in both ser...
|
82 % |
Visit
|
|
Cendarum — your .env, without the .env
Cendarum keeps your API keys, credentials, and environment variables encrypted on your device, then injects them straight into your app's process. Nothing on...
|
82 % |
Visit
|
|
ironrun - An encrypted workspace for AI agents
An encrypted workspace for your secrets and your AI agents. Keep keys in one place, grant agents time-boxed access, and run commands with secrets injected be...
|
82 % |
Visit
|
|
Runvault — the secure agent shell
An agent with a real Linux shell — and the secrets locked out. Credentials stay behind a server-side proxy the sandbox never sees, and every action is logged.
|
82 % |
Visit
|
|
keyctl — Lightweight Secret Manager
|
82 % |
Visit
|
Detected social media networks