forest6511/secretctl

Overview

secretctl is a local-first secrets manager delivered as a single Go binary with a CLI and desktop app. It integrates with the Model Context Protocol (MCP) to let AI agents access secrets without exposing them over a network.

Best for

Best for
Developers who need a lightweight, local secrets manager for AI agent toolchains

Use cases

• Securely inject API keys into local AI agent workflows
• Manage secrets for development environments without a cloud vault
• Provide MCP-compatible secret storage for desktop AI tools

How to use

Tools exposed

• go

Tested with

Claude Code

Notes

secretctl is a local-first secrets manager delivered as a single Go binary with a CLI and desktop app. It integrates with the Model Context Protocol (MCP) to let AI agents access secrets without exposing them over a network.

5 stars on GitHub. Last updated 2026-01-22. Licensed Apache-2.0.

Use cases

• Securely inject API keys into local AI agent workflows
• Manage secrets for development environments without a cloud vault
• Provide MCP-compatible secret storage for desktop AI tools

Pros

• Single binary with no external dependencies
• Local-first design keeps secrets off the network
• MCP integration enables direct use with AI agents

Cons

• Limited to local use; no built-in sync or team sharing
• Small community and early-stage project (5 stars)
• No cloud backup or remote access capabilities

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.