๐Ÿ—๏ธ

SecretSage

Privacy-First Agent Credentials

Terminal-based credential wizard for agent-driven development. Store secrets securely, grant them to agents on demand, revoke when done.

Features

๐Ÿ”

Age Encryption

Military-grade encryption using the modern Age encryption standard. Your secrets are protected at rest with industry best practices.

โฑ๏ธ

Grant & Revoke Flow

Grant credentials to agents only when needed. Revoke them immediately when done. Full control over your sensitive data.

๐Ÿค–

Agent-Friendly API

Designed for Claude Code, Cursor, Windsurf, and other AI coding assistants. Simple commands that agents understand.

โŒจ๏ธ

Terminal-Native

Lightweight CLI tool that lives in your terminal. No GUIs. No browser extensions. Just fast, secure credential management.

๐Ÿ›ก๏ธ

Zero Data Collection

Everything stays on your machine. No analytics. No telemetry. No cloud sync. Complete local control of your credentials.

๐Ÿ’ป

Cross-Platform

Works on macOS, Linux, and Windows. Consistent experience across all development environments.

Works Great With

๐Ÿค– Claude Code

Seamlessly grant credentials to Claude during development sessions.

๐Ÿ–ฑ๏ธ Cursor

Secure credential access for Cursor's AI-powered code editor.

๐ŸŒŠ Windsurf

Privacy-respecting secrets for Windsurf development workflows.

โšก Any AI Agent

Simple API works with any agent-driven development tool.

Installation

Install via npm

terminal
npm install -g @cyclecore/secretsage

Quick Start

terminal
# Initialize SecretSage secretsage init # Store a secret secretsage store API_KEY # Grant secret to an agent secretsage grant API_KEY # Revoke when done secretsage revoke API_KEY

Full documentation available on GitHub

Perfect For

๐Ÿ‘จโ€๐Ÿ’ป AI-Assisted Development

Grant API keys and credentials to Claude, Cursor, or other AI coding assistants without exposing them permanently.

๐Ÿ” DevOps & Infrastructure

Manage cloud provider credentials, database passwords, and deployment secrets with fine-grained control.

๐Ÿš€ Deployment Automation

Temporarily grant deployment credentials to CI/CD agents, then revoke them automatically when jobs complete.

๐Ÿงช Testing & Development

Safely manage test API keys, staging credentials, and development secrets across multiple projects.

Get Started

SecretSage

Free

Open Source ยท Apache 2.0 License

  • โœ“ Age encryption at rest
  • โœ“ Grant & revoke credentials
  • โœ“ Works with all AI agents
  • โœ“ Terminal-native interface
  • โœ“ Cross-platform support
  • โœ“ Zero data collection

Privacy Guarantee

SecretSage runs entirely on your machine. Your credentials never leave your computer.

No cloud sync. No analytics. No tracking. Your secrets stay with you. Always.

Questions?

Need help with SecretSage? Have feature requests? Get in touch.