AI · alternatives · 2026
24 alternatives to MCP Secrets Vault – Local MCP proxy to keep API keys out of LLM context
Local-first MCP mini-vault: let AIs call external APIs without ever seeing your keys. - RachidChabane/mcp-secrets-vault
MCP Secrets Vault is a local proxy server that prevents API keys and sensitive credentials from being exposed to large language models. It intercepts requests and stores secrets locally, allowing LLMs to reference them… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier.
- 1
Hey HN! Today we're launching Agent Vault - an open source HTTP credential proxy and vault for AI agents. Repo is at https://github.com/Infisical/agent-vault, and there's an in-depth description at https://infisical.com/blog/agent-vault-the-open-source-crede.... We built Agent Vault in response to a question that been plaguing the industry: How do we give agents secure access to services without them reading any secrets? Most teams building agents have run into this exact problem: They build an agent or agentic system and come to realize at some point…
Apr 2026 · github.com · its alternatives →
- 2
Skip migration and launch MCP with built-in Auth
Nov 2025 · arcade.dev · its alternatives →
- 3
We built OneCLI because AI agents are being given raw API keys. And it's going about as well as you'd expect. We figured the answer isn't "don't give agents access," it's "give them access without giving them secrets." OneCLI is an open-source gateway that sits between your AI agents and the services they call. You store your real credentials once in OneCLI's encrypted vault, and give your agents placeholder keys. When an agent makes an HTTP call through the proxy, OneCLI matches the request by host/path, verifies the agent should have access, swaps the placeholder for the real…
Mar 2026 · github.com · its alternatives →
- 4
A secure HashiCorp Vault for secrets, tokens, keys, passwords, and more. Automated deployment with Terraform on AWS. Configurable options for security and scalability. Usable with any applications and services hosted anywhere. - jcolemorrison/vault-on-aws
2020 · github.com · its alternatives →
- 5
Hi HN, Gabriel, Co-Founder at Permit.io. We're releasing Permit MCP Gateway today, an authorization proxy for MCP servers. TL;DR - we built an MCP Gateway that developers love and CISOs trust. Watch more[0] Now, after your little hate on using fancy copy on HN, to the real thing: MCP is in a strange place. Developers are debating whether it's overcomplicated compared to CLIs or skills files. Meanwhile, enterprises are adopting it by default because every agentic system that acts on your behalf, Cursor, Claude, Copilot, internal agents, needs a stable infrastructure for connecting to tools.…
Mar 2026 · permit.io · its alternatives →
- 6
Lockbox is a forward proxy for making third party API calls. - mkjt2/lockbox
2024 · github.com · its alternatives →
- 7
Infisical is the open-source platform for secrets, certificates, and privileged access management. - infisical/README.md at main · Infisical/infisical
2024 · github.com · its alternatives →
- 8
Keyblind▲2Encrypted secrets vault that blinds AI agents toyour APIkeys
Jun 2026 · keyblind.dev · its alternatives →
- 9
Latchkey▲122Hi HN, At Imbue, we’ve been following the rapid developments in the agent landscape and noticed that the way agents interact with third-party services on users’ behalf often leaves a lot to be desired. Integrations are ad hoc, complicated, context-heavy, and either unfriendly to non-technical users or tied to a lock-in of some sort. We‘re experimenting with a command-line tool, Latchkey, that could be used by local agents targeted at non-technical users while avoiding remote intermediaries. As far as we know, this is the only existing approach at the intersection of these two goals. Core…
Mar 2026 · github.com · its alternatives →
- 10
envsecrets▲72CLI first management of your environment secrets
2023 · envsecrets.com · its alternatives →
- 11
Build security into your apps and workflows
2023 · hashicorp.com · its alternatives →
- 12
AI Vault▲5I built Vault-AI to solve a problem I kept running into when building AI apps: API keys and secrets end up scattered in .env files, hardcoded, or shared insecurely. Vault-AI is a lightweight, self-hosted secrets manager — kind of like HashiCorp Vault, but simplified and aimed at AI workloads. It runs in Docker, comes with a simple CLI, and manages tenants, token-based auth, secret rotation, rollback, version history, and audit logs. Quickstart: git clone → ./start.sh → vault-ai store/get Repo: https://gitlab.com/vaultaiproject/vault-ai.git Would love feedback…
Jul 2026 · ps-aditya.github.io · its alternatives →
- 13
MCP Guardian▲12You can read more about EQTY Lab's enterprise-focused usage of this tooling here: https://www.eqtylab.io/blog/securing-model-context-protocol
Dec 2025 · guardianmcp.dev · its alternatives →
- 14
Vault-0▲2Encrypted secret vault and policy engine for AI agents
Feb 2026 · github.com · its alternatives →
- 15
Contribute to fmeringdal/covert development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 16
ContextGuard▲12I built ContextGuard after discovering that 43% of MCP servers have critical security vulnerabilities. MCP (Model Context Protocol) is the new standard that lets Claude Clients(Desktop, Windsurf, Cursor, etc.) access external tools and data sources - think of it as a plugin system for AI assistants. The problem: When you give those clients access to your filesystem, databases, or APIs through MCP servers, you're opening up serious attack vectors. Prompt injection, data leakage, and path traversal attacks are all possible. Most developers building MCP servers don't have security expertise,…
2025 · github.com · its alternatives →
- 17GS
Anthropic's Model Context Protocol (MCP) has made it easy to spin up servers that expose tools and data to LLMs. A lot of these MCP servers run locally because they need access to your files, shell, browser, etc. The problem: they typically run with the same privileges as your user. If a server is buggy, misconfigured, or prompt-injected, it can do anything you can do: read SSH keys, exfiltrate dotfiles, poke around in private repos, etc. Our research group is working on this by adding a security manifest (inspired by the Android app manifest) plus a local policy enforcement engine that…
Nov 2025 · guardiagent.com · its alternatives →
- 18MN
Give a local MCP server a public URL with one command. No accounts, no signup — anonymous, ephemeral, OAuth 2.1-protected tunnels for MCP servers.
Sep 2026 · terragohan.github.io · its alternatives →
- 19
Secure and automate the Vault unseal process
2019 · docs.anjuna.io · its alternatives →
- 20
Connect any AI model to 1200+ integrations (MCP, CLI, API) - metorial/metorial
2025 · github.com · its alternatives →
- 21
One vault. Every account. Switchedby your agent.
May 2026 · mcpvault.online · its alternatives →
- 22
Stop giving AI agents your API keys in plaintext > Use Vault
Mar 2026 · tryvault.xyz · its alternatives →
- 23
HasMCPfree tier▲6No-code GUI MCP Server Framework with built-in Auth & Logs
Jan 2026 · hasmcp.com · its alternatives →
- 24
Zero-cloud AES-256 vault for API keys, seeds & secrets.
May 2026 · cypherkeep.com · its alternatives →
Also compare
- Agent Vault – Open-source credential proxy and vault for agents alternatives
- Secure MCP Framework by Arcade.dev alternatives
- OneCLI – Vault for AI Agents in Rust alternatives
- Vault on AWS – A Terraform Project for Secrets Management Anywhere alternatives
- Permit MCP Gateway alternatives
- Lockbox: forward proxy for making third party API calls alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →