{"repo":"Michaelliv/psst","free":true,"listed":false,"github":"https://github.com/Michaelliv/psst","clone":"git clone https://github.com/Michaelliv/psst.git","description":"🤫 AI-native secrets manager. Agents use secrets without seeing them.","language":"TypeScript","stars":234,"topics":["agent","ai","bun","cli","keychain","secrets","secrets-management","security","typescript"],"license":"MIT","category":"security-tools","readme_excerpt":"psst 🤫 Because your agent doesn't need to know your secrets. --- The Hall of Shame I keep pasting API keys into Claude Code. Or just letting it cat .env . Every time I tell myself I'll stop doing that. I never do. Your secrets are now: - 📜 In the model's context window - 📟 In your terminal history - 📁 In that log file you forgot about - 🎓 Training data (maybe?) - 📸 Screenshot material for your coworker's Slack There's a better way. --- What if agents could use secrets without seeing them? The secret never touches the agent's context. It's injected into the subprocess environment at runtime. The agent orchestrates. psst handles the secrets. --- Storage backends psst supports pluggable storage backends. Pick the one that fits your environment: Backend Storage Best for ---------- ---------------------------- ---------------------------------------- sqlite Local encrypted SQLite DB Laptops, dev machines (default) aws AWS Secrets Manager EC2 / headless / shared team secrets Default: SQLite (local, encrypted) This is what you get out of the box: a local SQLite DB encrypted with AES-256-GCM, with the key stored in your OS keychain (or PSST PASSWORD as a fallback in headless environments). AWS Secrets Manager When you're running on EC2 with an IAM role, or you want secrets shared across machines, use the AWS backend: This writes a config.json into the vault directory: From then on, every psst set , psst get , psst list , psst run , psst SECRET -- cmd , etc. transparently uses A","default_branch":null,"files":null,"tree":[],"storefront":"/r/Michaelliv","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/Michaelliv/psst/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}