AgentSecrets
24K+ secrets found in public MCP configs

Give agents access.
Keep secrets scoped.

Agents can check what exists without seeing values. Trusted commands get scoped env injection, rate limits, and audit trails. One command replaces .env sprawl.

Get startedInstall the CLI
$8 per seat
ax — agent session
Scoped runtime access. Clean audit trail.
24K+

secrets have been found in public MCP config files this year.

Source: GitGuardian. Agent workflows made plaintext .env sprawl more dangerous. AgentSecrets adds scoped access, not copy-paste.

Plaintext env files do not scale to agents

A copied .env is full access.

Cursor, Claude Code, and custom agents work directly inside your checkout. If the file is there, it can leak through prompts, logs, traces, screenshots, or a poisoned doc. A plaintext .env turns one task into the whole vault.

Poisoned context can leak keys

If an agent can read the file, a malicious page or doc can ask it to print the values.

Traces retain what agents see

Live credentials can end up in prompts, terminal output, recordings, and support screenshots.

Worktrees multiply copies

Every checkout, branch, and teammate becomes another place to sync, rotate, and clean up keys.

One workflow for humans and agents

Controlled for agents. Effortless for you.

For agents

Let agents ask safely before they read.

  • has_secretReturns true / false so agents can branch without seeing values.
  • list_secretsNames only. Useful context without credentials.
  • run_commandOpt-in only. Requires read scope, explicit enablement, and an allowlist.
For engineers

Keep the CLI path boring.

  • Repo-linked and per-env
    ax knows the checkout and active environment.
  • Encrypted vault
    Values stay encrypted at rest and scoped at runtime.
  • Versioned and audited
    Every change, reveal, and run is recorded.
One command from the checkout

Set up the vault, then run normally.

Install once. From any repo, link the vault, import the best env file AgentSecrets finds, and run trusted commands through ax.

  1. 01
    Install the CLI
    One global install for macOS, Linux, and WSL.
  2. 02
    Link and import
    ax init detects the repo and imports the best env file it finds.
  3. 03
    Run with scoped values
    ax run -- <command> injects values for that process and records the access.
quickstart.sh
# 1 · install
npm install -g @agentsecrets/ax
# 2 · link the repo and import detected env
ax init
✓ 7 secrets imported · .env ready to remove
# 3 · run trusted code with scoped values
ax run -- ./agent.py
→ secrets injected · run audited
# 4 · MCP for Cursor / Claude
npx @agentsecrets/mcp

Stop copying secrets into every repo, worktree, and agent.

Set up ax from the checkout. Simple pricing: $8 per seat.

Get startedSign in
AES-256-GCM Values hidden by default Git-native