# Secrets managers and credential vaults for agents (slim)

> 9 secrets & credential vaults ranked by the Anchor benchmark. Leader Infisical (A). Stores for API keys and other secrets that an agent or its runtime reads at call time, instead of keeping them in prompts, config files or environment dumps. Compared on access controls, rotation, audit, SDKs and self-hosting.

- Full: https://www.anchorterminal.com/categories/secrets.md (~4,200 tokens) · this version ~530 tokens · JSON https://www.anchorterminal.com/categories/secrets.json · canonical https://www.anchorterminal.com/categories/secrets
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-04

- Tools: 9 · agent-ready (BB+): 5 · accept x402: 0 · JSON: https://www.anchorterminal.com/api/v1/tools.json · by capability: https://www.anchorterminal.com/api/v1/capabilities.json
- Capabilities: secrets.store, secrets.rotate, secrets.machine-identity, secrets.audit, secrets.self-host

| # | Tool | Grade | Score | Confidence | x402 | Auth | Where | Slim |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| 4 | Infisical | A | 81.9 | medium | no | OAuth or key | hosted + local | https://www.anchorterminal.com/tools/infisical.min.md |
| 15 | AWS Secrets Manager | A | 78.1 | medium | no | OAuth or key | hosted | https://www.anchorterminal.com/tools/aws-secrets-manager.min.md |
| 26 | Google Cloud Secret Manager | BB | 76.6 | medium | no | OAuth | hosted | https://www.anchorterminal.com/tools/google-secret-manager.min.md |
| 55 | Akeyless (SecretlessAI and MCP server) | BB | 73.7 | medium | no | OAuth or key | hosted + local | https://www.anchorterminal.com/tools/akeyless.min.md |
| 79 | Doppler | BB | 71.6 | medium | no | OAuth or key | hosted + local | https://www.anchorterminal.com/tools/doppler.min.md |
| 104 | 1Password service accounts, SDKs and Environments MCP | B | 69.9 | medium | no | OAuth or key | local | https://www.anchorterminal.com/tools/1password.min.md |
| 136 | Azure MCP Server | B | 67.8 | medium | no | OAuth or key | local | https://www.anchorterminal.com/tools/azure-mcp.min.md |
| 184 | HashiCorp Vault + Vault MCP Server | B | 64.4 | medium | no | OAuth or key | local | https://www.anchorterminal.com/tools/hashicorp-vault.min.md |
| 297 | Bitwarden Secrets Manager | C | 57.1 | medium | no | API key | hosted | https://www.anchorterminal.com/tools/bitwarden-secrets-manager.min.md |