Cloak – let AI agents use your API keys without ever seeing them
No read_secret tool means agents can use keys without ever reading them.

Medium article behind Cloudflare gate with no code or demo to evaluate.
Developers managing API keys
No read_secret tool means agents can use keys without ever reading them.
Shamir's Secret Sharing on paper solves digital inheritance without trusting a cloud service.
Clean PGP GUI alternative to Kleopatra for basic sign and encrypt workflows.
Deterministic fallback order (ENV → .env → vault) plus an opt-in validation mode and a strict CI-friendly option is a practical combo I wish I'd had in several projects. The doctor CLI that lists found keys and minimal provider probes (e.g., GET /v1/models for OpenAI) is a nice touch — useful for catching bad tokens before a pipeline runs. It’s not reinventing secret managers, but the zero-deps, stdlib-only approach and CI strictness make it an immediately usable tool for small teams.
HashiCorp Vault alternative that cuts cloud lock-in with one-time pricing instead of subscriptions.
Agents never see real keys, but Vault already does secret injection.