Portunus

Portunus is a free, open-source (MIT) secret broker for AI agents. Agents reference secrets by name ({{secret:name}}); Portunus checks an approval gate, fetches the value, and injects it only where it's used: an env var, a file, or an exec argument. It never returns a secret value into an LLM's context.

It ships as a stdio MCP server and a CLI, plus a local web UI and a macOS menu-bar app. Working backends today: local-encrypted, GCP Secret Manager, and Chrome saved logins (read-only). AWS, HashiCorp Vault, Infisical, Doppler, 1Password and Azure are open stubs, and contributions are welcome.

Install: curl -fsSL https://mdostal.github.io/portunus/install.sh | bash. Source: github.com/mdostal/portunus