Privacy-First Agent Credentials
Terminal-based credential wizard for agent-driven development. Store secrets securely, grant them to agents on demand, revoke when done.
Military-grade encryption using the modern Age encryption standard. Your secrets are protected at rest with industry best practices.
Grant credentials to agents only when needed. Revoke them immediately when done. Full control over your sensitive data.
Designed for Claude Code, Cursor, Windsurf, and other AI coding assistants. Simple commands that agents understand.
Lightweight CLI tool that lives in your terminal. No GUIs. No browser extensions. Just fast, secure credential management.
Everything stays on your machine. No analytics. No telemetry. No cloud sync. Complete local control of your credentials.
Works on macOS, Linux, and Windows. Consistent experience across all development environments.
Agents request credentials, you enter them securely in a separate terminal. True human-in-the-loop for sensitive operations.
Track rotation history with timestamps and reasons. Know when credentials were changed and why.
Securely store 2FA recovery codes, emergency access tokens, and other multi-value secrets with usage tracking.
Seamlessly grant credentials to Claude during development sessions.
Secure credential access for Cursor's AI-powered code editor.
Privacy-respecting secrets for Windsurf development workflows.
Simple API works with any agent-driven development tool.
npm install -g @cyclecore/secretsage
Full documentation available on npm
Grant API keys and credentials to Claude, Cursor, or other AI coding assistants without exposing them permanently.
Manage cloud provider credentials, database passwords, and deployment secrets with fine-grained control.
Temporarily grant deployment credentials to CI/CD agents, then revoke them automatically when jobs complete.
Safely manage test API keys, staging credentials, and development secrets across multiple projects.
Free
Open Source · Apache 2.0 License
SecretSage runs entirely on your machine. Your credentials never leave your computer.
No cloud sync. No analytics. No tracking. Your secrets stay with you. Always.