Secrets vault for apps & AI agents
Secrets vault for apps & AI agents
Secret Store is a desktop application and command line interface designed to function as a centralized vault for environment variables and project credentials. Its primary purpose is to securely store encrypted environment files, such as .env files, and manage access to those secrets for both human team members and automated coding agents. The application encrypts each value under its specific project key before saving, ensuring data is protected at rest while still allowing for controlled distribution. The core functionality of Secret Store is organized around three actions: store, authorize, and audit. Users can store encrypted environment variables in one location. Access is granted on a granular basis, allowing permissions by role, by specific chosen items for people, and by project, environment, and time duration for agents. Every access event is logged, creating a clear audit trail that records the key name accessed, but not the value itself. For coding agents, access can be scoped to specific environments and is time limited, with all actions subject to auditing. A typical workflow involves a user pulling secrets into a local .env file using the CLI, such as running a command to write keys from a specific project and environment. The application also features a consent page that requests user approval before granting agent access. The desktop version for Windows includes system tray persistence, can open secretstore:// links, and supports signed updates that are verified before installation. The application is available as a free tier with 500 monthly credits for agents and CLI use, with a professional tier available at 20 dollars per month that offers additional capacity.