seekrit

seekrit is an end-to-end encrypted secrets manager for teams, machines, and AI agents. It is built around zero-knowledge handling of secrets so that keys are generated and used on the client side, while the backend only holds ciphertext. The service is described as running on Cloudflare’s global edge, and its stated purpose is to keep secrets unreadable by the server.

A central feature is one-command secret injection, which places the right secrets where code runs. The example shown uses a command-line workflow to start a server with decrypted environment variables. seekrit also ships an MCP server. Through Claude Code or another MCP client, an agent can create environments, set secrets, mint scoped tokens, and run commands as tools. Another stated behavior is that run_command injects decrypted secrets into a child process and returns only that process’s output, so secrets do not appear in the transcript or enter the agent’s context.

The product is explicitly aimed at teams, machines, and AI agents. Its agent-focused features are described as helping agents build, deploy, and run code without handing over secret values. The MCP server runs locally, next to the key, which is presented as part of the zero-knowledge design for agents.

seekrit is presented as a web service with an open console and documentation links, and the page also shows command-line usage. The page does not state pricing or licensing details.