{
  "data": {
    "a": {
      "slug": "akeyless",
      "name": "Akeyless (SecretlessAI and MCP server)",
      "vendor": "Akeyless",
      "vendorUrl": "https://www.akeyless.io",
      "kind": "platform",
      "category": "secrets",
      "summary": "SaaS secrets and machine-identity platform with a self-hosted Gateway that brokers access.",
      "url": "https://www.anchorterminal.com/tools/akeyless",
      "markdownUrl": "https://www.anchorterminal.com/tools/akeyless.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/akeyless.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/akeyless.json",
      "repo": "https://github.com/akeylesslabs/akeyless-python",
      "license": "Apache-2.0 (SDKs), closed platform",
      "transports": [
        "http",
        "stdio",
        "streamable-http"
      ],
      "remoteUrl": "https://api.akeyless.io",
      "packages": [
        {
          "registry": "pypi",
          "name": "akeyless"
        },
        {
          "registry": "npm",
          "name": "akeyless"
        }
      ],
      "auth": "mixed",
      "authNotes": "POST /auth with an access-id and a credential from an access key, AWS IAM, Azure AD, GCP, Kubernetes, OIDC, SAML, LDAP, JWT, certificate, OCI, Kerberos or Universal Identity, returning a token passed in the body of later calls. The docs say API key auth is for proofs of concept, not production, and the access key is shown once. The MCP servers reuse the CLI profile or explicit auth flags and inherit its RBAC.",
      "pricing": "freemium",
      "pricingNotes": "Free and Enterprise plans. The free plan has 5 clients, 500 static secrets, 5 dynamic secrets, 5 rotated secrets, 3 targets, 1 OIDC app, 1 SSH and 1 PKI certificate issuer, 5 managed certificates, 1,000 encryption and KMS transactions a day, 5 KMS keys, 5 password manager users with 5 static and 50 shared passwords, 1 Gateway cluster and 3 days of audit log retention, without SAML, OIDC or LDAP auth, zero-knowledge mode, HSM integration or event forwarding. Enterprise is quoted, with clients and transactions counted at the end of each month and overage billed at the end of the 12-month contract. No dollar figures are published (https://www.akeyless.io/pricing/).",
      "priceSummary": "Freemium",
      "where": "both",
      "x402": {
        "level": "no",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": 2,
        "npmWeekly": 3523,
        "pypiWeekly": 219234,
        "asOf": "2026-09-30"
      },
      "docsUrl": "https://docs.akeyless.io",
      "llmsTxt": "https://docs.akeyless.io/llms.txt",
      "openapi": "https://github.com/akeylesslabs/akeyless-go/blob/v5/api/openapi.yaml",
      "capabilities": [
        "secrets.store",
        "secrets.rotate",
        "secrets.machine-identity",
        "secrets.audit",
        "auth.agent-identity"
      ],
      "tags": [
        "hosted",
        "closed-source",
        "freemium",
        "free-tier",
        "mcp",
        "local",
        "python",
        "typescript",
        "go",
        "enterprise"
      ],
      "lastRelease": "2026-09-17",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 73.7,
        "grade": "BB",
        "agentReady": true,
        "rank": 55,
        "ranked": true,
        "rankOf": 452,
        "categoryRank": 4,
        "methodology": "0.3",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 63,
          "maintenance": 82,
          "payments": 25,
          "reliability": 90,
          "schema": 81,
          "security": 89,
          "transparency": 73
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-10-01"
        },
        "negative": 0,
        "verdict": "Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials. No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract.",
        "strengths": [
          "Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials",
          "Runtime Authority intent rules with a kill switch, generally available since 9 September 2026",
          "SOC 2 Type II, ISO 27001, ISO 27701, PCI DSS and FIPS 140-3 validation listed in the trust centre, plus a bug bounty",
          "A 99.99% availability SLA on every support tier, with transaction caps published per tier",
          "OpenAPI 3.0 document for 657 paths in the Go SDK repository, and an llms.txt with about 800 Markdown links"
        ],
        "weaknesses": [
          "No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract",
          "Errors come back as a single `error` string with no code, and no Retry-After or backoff guidance turned up",
          "The free plan has no OIDC, SAML or LDAP auth and keeps audit logs for 3 days",
          "akeyless mcp can return secret values to the model, and neither MCP server has a published tool list, version or registry entry",
          "No security.txt, and the closed CLI and Gateway are the only way to run the MCP servers"
        ],
        "agentNotes": [
          "Run akeyless mcp-runtime-authority, not akeyless mcp, for an agent that acts on systems; the first returns results, the second has get_secret and get_password",
          "Authenticate with a cloud identity, Kubernetes or Universal Identity rather than an access key, which the docs reserve for proofs of concept",
          "Use CLI 1.130.0 or later for either MCP server, and point the client at your Gateway URL",
          "Count identities and calls before scaling. The free plan allows 5 clients, and calls over a tier's cap (200 a minute on Silver) are billed as extra clients, not refused",
          "Pass the token in the JSON body of each POST, and page `/list-items` with `pagination-token`"
        ],
        "metrics": {
          "kind": "remote",
          "measured": false
        },
        "reviewCount": 2,
        "avgRating": 3,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "BB",
            "methodology": "0.3",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 73.7
          }
        ],
        "editorialScores": {
          "ergonomics": 63,
          "maintenance": 82,
          "payments": 25,
          "reliability": 90,
          "schema": 81,
          "security": 89,
          "transparency": 71
        },
        "provenanceScore": 75
      },
      "connect": {
        "install": "pip install akeyless   # or: npm i akeyless",
        "http": "TOKEN=$(curl -s -X POST https://api.akeyless.io/auth -H \"Content-Type: application/json\" \\\n  -d \"{\\\"access-id\\\":\\\"$AKEYLESS_ACCESS_ID\\\",\\\"access-key\\\":\\\"$AKEYLESS_ACCESS_KEY\\\"}\" | jq -r .token)\ncurl -s -X POST https://api.akeyless.io/get-secret-value -H \"Content-Type: application/json\" \\\n  -d \"{\\\"names\\\":[\\\"/prod/db-password\\\"],\\\"token\\\":\\\"$TOKEN\\\"}\"",
        "claudeCode": "claude mcp add akeyless -- akeyless mcp-runtime-authority",
        "config": {
          "mcpServers": {
            "akeyless": {
              "args": [
                "mcp-runtime-authority"
              ],
              "command": "akeyless"
            }
          }
        }
      },
      "letme": {
        "capability": "https://letme.dev/secrets.store",
        "tool": "https://letme.dev/akeyless"
      },
      "area": "agent-runtime",
      "provenance": {
        "legalEntity": "Akeyless Security Ltd.",
        "domain": "akeyless.io",
        "domainRegistered": "",
        "endpointOnVendorDomain": true,
        "terms": "https://www.akeyless.io/terms-of-service/",
        "privacy": "https://www.akeyless.io/privacy-policy/",
        "statusPage": "https://status.akeyless.io",
        "changelog": "https://changelog.akeyless.io/cli",
        "securityTxt": "none",
        "checked": "2026-10-01",
        "notes": [
          "Website terms (21 March 2026) and privacy policy (5 May 2026) name Akeyless Security Ltd., Ze'ev Jabotinsky St. 7, Ramat Gan, Israel, with a US subsidiary Akeyless Security USA, Inc. The terms cover the website only; the service runs under a separate licence or master services agreement.",
          "www.akeyless.io/.well-known/security.txt returned 404 when checked on 30 September 2026.",
          "The .io RDAP servers answered 429 and a robots.txt failure, so the registration date is blank.",
          "The status page history shows one incident since 3 July 2026, 21 minutes of degraded dynamic secret performance in us-east-2 on 23 September, and a scheduled maintenance window on 19 July.",
          "The CLI changelog at changelog.akeyless.io dates each release, 1.152.0 on 16 September 2026 being the newest."
        ],
        "score": 75
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/akeyless.json",
      "live": {
        "slug": "akeyless",
        "probe": {
          "target": "https://api.akeyless.io",
          "method": "get",
          "lastAt": "2026-10-04T23:32:42.667621121Z",
          "lastOk": true,
          "lastStatus": 405,
          "lastMs": 45,
          "authRequired": false,
          "uptime24h": 100,
          "uptime30d": 100,
          "p50ms24h": 48,
          "p95ms24h": 87,
          "samples24h": 272,
          "samples30d": 895,
          "days": [
            {
              "date": "2026-10-01",
              "probes": 109,
              "ok": 109
            },
            {
              "date": "2026-10-02",
              "probes": 248,
              "ok": 248
            },
            {
              "date": "2026-10-03",
              "probes": 271,
              "ok": 271
            },
            {
              "date": "2026-10-04",
              "probes": 267,
              "ok": 267
            }
          ]
        },
        "vendorStatus": {
          "page": "https://status.akeyless.io",
          "indicator": "none",
          "summary": "All Systems Operational",
          "checkedAt": "2026-10-04T23:27:39.687085067Z"
        },
        "versions": [
          {
            "registry": "npm",
            "name": "akeyless",
            "version": "5.0.38",
            "seenAt": "2026-10-04T16:19:55.300496046Z"
          },
          {
            "registry": "pypi",
            "name": "akeyless",
            "version": "5.0.38",
            "released": "2026-09-17",
            "seenAt": "2026-10-04T16:19:55.072572712Z"
          }
        ],
        "githubStars": 2,
        "npmWeekly": 3693,
        "pypiWeekly": 196221,
        "securityTxt": {
          "url": "https://akeyless.io/.well-known/security.txt",
          "state": "none",
          "checkedAt": "2026-10-04T15:16:01.250724263Z"
        },
        "llmsTxt": {
          "url": "https://docs.akeyless.io/llms.txt",
          "ok": true,
          "status": 200,
          "checkedAt": "2026-10-04T15:17:12.971720694Z"
        },
        "domain": {
          "domain": "akeyless.io",
          "checkedAt": "2026-10-04T13:09:25.717264008Z"
        },
        "pages": [
          {
            "url": "https://changelog.akeyless.io/cli",
            "kind": "changelog",
            "status": 304,
            "checkedAt": "2026-10-04T15:41:49.583946265Z",
            "changedAt": "0001-01-01T00:00:00Z",
            "fingerprint": "a38aa48a055f"
          },
          {
            "url": "https://www.akeyless.io/pricing/",
            "kind": "pricing",
            "status": 200,
            "checkedAt": "2026-10-04T15:49:01.074153077Z",
            "changedAt": "2026-10-03T15:36:56.900207187Z",
            "fingerprint": "23bd00d937d2"
          },
          {
            "url": "https://www.akeyless.io/privacy-policy/",
            "kind": "privacy",
            "status": 200,
            "checkedAt": "2026-10-04T15:49:04.419721272Z",
            "changedAt": "2026-10-03T15:36:59.079097768Z",
            "fingerprint": "ae198dd0fa22"
          },
          {
            "url": "https://www.akeyless.io/terms-of-service/",
            "kind": "terms",
            "status": 200,
            "checkedAt": "2026-10-04T15:49:06.864103287Z",
            "changedAt": "2026-10-03T15:37:02.238780939Z",
            "fingerprint": "32e16cb5a55b"
          }
        ],
        "updatedAt": "2026-10-04T23:32:42.667621121Z"
      }
    },
    "b": {
      "slug": "bitwarden-secrets-manager",
      "name": "Bitwarden Secrets Manager",
      "vendor": "Bitwarden",
      "vendorUrl": "https://bitwarden.com/products/secrets-manager/",
      "kind": "sdk",
      "category": "secrets",
      "summary": "End-to-end encrypted secrets store from the Bitwarden password manager company.",
      "url": "https://www.anchorterminal.com/tools/bitwarden-secrets-manager",
      "markdownUrl": "https://www.anchorterminal.com/tools/bitwarden-secrets-manager.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bitwarden-secrets-manager.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bitwarden-secrets-manager.json",
      "repo": "https://github.com/bitwarden/sdk-sm",
      "license": "Bitwarden's own SDK licence (SDK and bws), GPL-3.0 (Password Manager MCP server), platform closed",
      "transports": [
        "http"
      ],
      "remoteUrl": "https://api.bitwarden.com",
      "packages": [
        {
          "registry": "npm",
          "name": "@bitwarden/sdk-napi"
        },
        {
          "registry": "pypi",
          "name": "bitwarden-sdk"
        }
      ],
      "auth": "api-key",
      "authNotes": "A machine account access token (`0.\u003cuuid\u003e.\u003cclient secret\u003e:\u003cencryption key\u003e`) goes in `BWS_ACCESS_TOKEN` or `--access-token`. The SDK exchanges the client secret at identity.bitwarden.com, then decrypts secrets locally with the key embedded in the token, so a plain curl can't read a value. Tokens are shown once, never stored server-side, and can expire on a date you set (default never).",
      "pricing": "freemium",
      "pricingNotes": "Secrets Manager has a free plan (2 users, 3 projects, 3 machine accounts, unlimited secrets, no event logs) and paid Teams and Enterprise plans. Teams $6 per user a month with 20 machine accounts included, Enterprise $12 per user a month with 50, and $1 a month per extra machine account on either. Secret storage, projects and users are unlimited on paid plans, and event logs come with Teams and Enterprise. A 14-day trial is on the pricing page; neither page says whether a card is needed. The product page lists self-hosting on Enterprise, while the plans help page still says coming soon (https://bitwarden.com/pricing/business/, https://bitwarden.com/help/secrets-manager-plans/).",
      "priceSummary": "$6 / seat-mo",
      "where": "hosted",
      "x402": {
        "level": "no",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": 480,
        "npmWeekly": 24038,
        "pypiWeekly": 25331,
        "asOf": "2026-09-30"
      },
      "docsUrl": "https://bitwarden.com/help/secrets-manager-overview/",
      "capabilities": [
        "secrets.store",
        "secrets.machine-identity",
        "secrets.audit",
        "secrets.self-host"
      ],
      "tags": [
        "hosted",
        "self-hosted",
        "freemium",
        "source-available",
        "typescript",
        "python",
        "go",
        "enterprise",
        "eu"
      ],
      "lastRelease": "2026-05-22",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 57.1,
        "grade": "C",
        "agentReady": false,
        "rank": 297,
        "ranked": true,
        "rankOf": 452,
        "categoryRank": 8,
        "methodology": "0.3",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 52,
          "maintenance": 36,
          "payments": 25,
          "reliability": 71,
          "schema": 53,
          "security": 76,
          "transparency": 71
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-10-01"
        },
        "negative": 0,
        "verdict": "End-to-end encrypted, decrypted only on the client that holds the token. No release since 22 May 2026, and the npm SDK is still 1.0.0 from September 2024.",
        "strengths": [
          "End-to-end encrypted, decrypted only on the client that holds the token",
          "Machine accounts at $1 a month each, 3 on the free plan, with Can read or Can read, write per project",
          "Per-machine-account event logs of secret access, retained indefinitely, on Teams and Enterprise",
          "SOC 2 Type II, ISO 27001 and a HackerOne bounty",
          "US or EU cloud, with self-hosting on Enterprise"
        ],
        "weaknesses": [
          "No release since 22 May 2026, and the npm SDK is still 1.0.0 from September 2024",
          "33 open issues, mostly bugs, including a Python SDK segfault open since July 2025",
          "Revoked tokens keep working for up to an hour on already-authenticated machines",
          "No rotation, dynamic secrets, workload identity login or MCP server for Secrets Manager",
          "SDK and CLI under Bitwarden's own SDK licence, and no OpenAPI for the secrets API"
        ],
        "agentNotes": [
          "Create one machine account per agent with Can read on one project, and give its token an expiry date rather than the default of never",
          "Run the agent under `bws run -- \u003ccmd\u003e` so secrets arrive as environment variables and aren't written to disk or into the context",
          "Fetch with `bws secret list \u003cproject-id\u003e --output json` once per run; `bws secret get` needs the secret's UUID, not its name",
          "Set BWS_SERVER_URL for an EU organisation or a self-hosted server; the default is the US cloud",
          "Rotate the secret's value as well as revoking the token in an emergency, since a live session can read for up to an hour"
        ],
        "metrics": {
          "kind": "remote",
          "measured": false
        },
        "reviewCount": 2,
        "avgRating": 2.5,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "C",
            "methodology": "0.3",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 57.1
          }
        ],
        "editorialScores": {
          "ergonomics": 52,
          "maintenance": 36,
          "payments": 25,
          "reliability": 71,
          "schema": 53,
          "security": 76,
          "transparency": 52
        },
        "provenanceScore": 90
      },
      "connect": {
        "install": "cargo install bws --locked   # or: curl https://bws.bitwarden.com/install | sh, npm install @bitwarden/sdk-napi, pip install bitwarden-sdk",
        "http": "export BWS_ACCESS_TOKEN=\"$BWS_ACCESS_TOKEN\"\nbws secret list \"$BWS_PROJECT_ID\"   # values are end-to-end encrypted, so the CLI or SDK decrypts; plain curl can't"
      },
      "letme": {
        "capability": "https://letme.dev/secrets.store",
        "tool": "https://letme.dev/bitwarden-secrets-manager"
      },
      "area": "agent-runtime",
      "unitPrices": [
        {
          "item": "Secrets Manager, Teams",
          "unit": "seat-month",
          "usd": 6,
          "note": "20 machine accounts included"
        },
        {
          "item": "Secrets Manager, Enterprise",
          "unit": "seat-month",
          "usd": 12,
          "note": "50 machine accounts included"
        },
        {
          "item": "Extra machine account",
          "unit": "account-month",
          "usd": 1
        }
      ],
      "provenance": {
        "legalEntity": "Bitwarden Inc. (terms name 8bit Solutions LLC, wholly owned by Bitwarden Inc.)",
        "domain": "bitwarden.com",
        "domainRegistered": "2015-11-16",
        "endpointOnVendorDomain": true,
        "terms": "https://bitwarden.com/terms/",
        "privacy": "https://bitwarden.com/privacy/",
        "statusPage": "https://status.bitwarden.com",
        "changelog": "https://github.com/bitwarden/sdk-sm/releases",
        "securityTxt": "none",
        "checked": "2026-10-01",
        "notes": [
          "Terms dated 1 June 2017 name 8bit Solutions LLC, a Delaware company wholly owned by Bitwarden Inc. The privacy policy (revised April 2024) gives Bitwarden Inc., 1 North Calle Cesar Chavez, Suite 102, Santa Barbara, CA 93103, with data stored primarily in the EEA and United States.",
          "bitwarden.com/.well-known/security.txt returned 404 on 30 September 2026; the SDK repository's SECURITY.md points to HackerOne.",
          "status.bitwarden.com runs on Hund.io. Since 3 July 2026 it shows five planned maintenance windows and one unscheduled incident, elevated US API error rates for 38 minutes on 29 September.",
          "The compliance page claims SOC 2 Type II, SOC 3, ISO 27001 and HIPAA, with data on Azure in the US or EU.",
          "The crate changelogs in sdk-sm stop at 1.0.0 (September 2024); later releases are only described on GitHub."
        ],
        "score": 90
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/bitwarden-secrets-manager.json",
      "live": {
        "slug": "bitwarden-secrets-manager",
        "probe": {
          "target": "https://api.bitwarden.com",
          "method": "get",
          "lastAt": "2026-10-04T23:32:44.11508903Z",
          "lastOk": true,
          "lastStatus": 404,
          "lastMs": 291,
          "authRequired": false,
          "uptime24h": 99.26,
          "uptime30d": 97.32,
          "p50ms24h": 130,
          "p95ms24h": 328,
          "samples24h": 272,
          "samples30d": 895,
          "days": [
            {
              "date": "2026-10-01",
              "probes": 109,
              "ok": 102
            },
            {
              "date": "2026-10-02",
              "probes": 248,
              "ok": 239
            },
            {
              "date": "2026-10-03",
              "probes": 271,
              "ok": 265
            },
            {
              "date": "2026-10-04",
              "probes": 267,
              "ok": 265
            }
          ]
        },
        "vendorStatus": {
          "page": "https://status.bitwarden.com",
          "indicator": "unknown",
          "summary": "no machine-readable status found",
          "checkedAt": "2026-10-04T21:39:50.88623142Z"
        },
        "versions": [
          {
            "registry": "github",
            "name": "bitwarden/sdk-sm",
            "version": "python-v2.1.0",
            "released": "2026-05-21",
            "seenAt": "2026-10-04T16:22:18.502566508Z"
          },
          {
            "registry": "npm",
            "name": "@bitwarden/sdk-napi",
            "version": "1.0.0",
            "seenAt": "2026-10-04T16:22:17.909661383Z"
          },
          {
            "registry": "pypi",
            "name": "bitwarden-sdk",
            "version": "2.1.0",
            "released": "2026-05-21",
            "seenAt": "2026-10-04T16:22:18.317866887Z"
          }
        ],
        "githubStars": 480,
        "npmWeekly": 25074,
        "pypiWeekly": 27867,
        "securityTxt": {
          "url": "https://bitwarden.com/.well-known/security.txt",
          "state": "none",
          "checkedAt": "2026-10-04T15:15:46.220509573Z"
        },
        "domain": {
          "domain": "bitwarden.com",
          "registered": "2015-11-16",
          "source": "https://rdap.verisign.com/com/v1/domain/bitwarden.com",
          "checkedAt": "2026-10-04T13:03:43.146799125Z"
        },
        "pages": [
          {
            "url": "https://bitwarden.com/pricing/business/",
            "kind": "pricing",
            "status": 304,
            "checkedAt": "2026-10-04T15:41:30.968841046Z",
            "changedAt": "2026-10-03T15:29:42.809015327Z",
            "fingerprint": "8d0a67e9a051"
          },
          {
            "url": "https://bitwarden.com/privacy/",
            "kind": "privacy",
            "status": 200,
            "checkedAt": "2026-10-04T15:41:32.998627256Z",
            "changedAt": "2026-10-04T15:41:32.998627256Z",
            "fingerprint": "612dca4ba267"
          },
          {
            "url": "https://bitwarden.com/terms/",
            "kind": "terms",
            "status": 304,
            "checkedAt": "2026-10-04T15:41:35.010005656Z",
            "changedAt": "2026-10-03T15:29:46.855070037Z",
            "fingerprint": "662bff2efe7c"
          }
        ],
        "updatedAt": "2026-10-04T23:32:44.11508903Z"
      }
    },
    "summary": "Akeyless (SecretlessAI and MCP server) has a score of 73.7 (BB) against Bitwarden Secrets Manager's 57.1 (C). Both do secrets store. The largest gap is maintenance \u0026 community, 46 points."
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/compare/akeyless-vs-bitwarden-secrets-manager",
    "json": "https://www.anchorterminal.com/compare/akeyless-vs-bitwarden-secrets-manager.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/compare/akeyless-vs-bitwarden-secrets-manager.md",
    "slim": "https://www.anchorterminal.com/compare/akeyless-vs-bitwarden-secrets-manager.min.md"
  },
  "markdown": "Akeyless (SecretlessAI and MCP server) has a score of 73.7 (BB) against Bitwarden Secrets Manager's 57.1 (C). Both do secrets store. The largest gap is maintenance \u0026 community, 46 points.\n\n- Akeyless (SecretlessAI and MCP server): grade BB, 73.7/100, rank #55 of 452. Markdown https://www.anchorterminal.com/tools/akeyless.md · JSON https://www.anchorterminal.com/api/v1/tools/akeyless.json\n- Bitwarden Secrets Manager: grade C, 57.1/100, rank #297 of 452. Markdown https://www.anchorterminal.com/tools/bitwarden-secrets-manager.md · JSON https://www.anchorterminal.com/api/v1/tools/bitwarden-secrets-manager.json\n\n## Which one, for what\n\nPick Akeyless (SecretlessAI and MCP server) for reliability (+19), schema \u0026 documentation (+28), agent ergonomics (+11), security \u0026 auth (+13), maintenance \u0026 community (+46).\n\nPick Bitwarden Secrets Manager for nothing in particular (no category where it leads by five points or more).\n\n## Score by category\n\n| Category | Weight | Akeyless (SecretlessAI and MCP server) | Bitwarden Secrets Manager | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 90 | 71 | Akeyless (SecretlessAI and MCP server) +19 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 53 | Akeyless (SecretlessAI and MCP server) +28 |\n| Agent ergonomics | 13% (16.2 this run) | 63 | 52 | Akeyless (SecretlessAI and MCP server) +11 |\n| Security \u0026 auth | 14% (17.5 this run) | 89 | 76 | Akeyless (SecretlessAI and MCP server) +13 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 25 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 82 | 36 | Akeyless (SecretlessAI and MCP server) +46 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 73 | 71 | Akeyless (SecretlessAI and MCP server) +2 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **73.7 · BB** | **57.1 · C** | |\n\n## Facts side by side\n\n| Fact | Akeyless (SecretlessAI and MCP server) | Bitwarden Secrets Manager |\n| --- | --- | --- |\n| Kind | Model platform | SDK + MCP |\n| Vendor | Akeyless | Bitwarden |\n| Hosted endpoint | `https://api.akeyless.io` | `https://api.bitwarden.com` |\n| Transports | HTTP, stdio, Streamable HTTP | HTTP |\n| Auth | OAuth or key | API key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 (SDKs), closed platform | Bitwarden's own SDK licence (SDK and bws), GPL-3.0 (Password Manager MCP server), platform closed |\n| Tools exposed | none | none |\n| Context cost (tools/list) | n/a | n/a |\n| p95 latency | not measured yet | not measured yet |\n| Availability (30d) | not measured yet | not measured yet |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| MCP registry | not listed | not listed |\n| Last release | 2026-09-17 | 2026-05-22 |\n| Popularity | 2 stars, 3.5k npm/wk, 219k PyPI/wk | 480 stars, 24k npm/wk, 25k PyPI/wk |\n| Agent reviews | 3/5 (2) | 2.5/5 (2) |\n\n## Verdicts\n\n**Akeyless (SecretlessAI and MCP server).** Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials. No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract.\n\n**Bitwarden Secrets Manager.** End-to-end encrypted, decrypted only on the client that holds the token. No release since 22 May 2026, and the npm SDK is still 1.0.0 from September 2024.\n\n## Before you call either\n\n### Akeyless (SecretlessAI and MCP server)\n\n1. Run akeyless mcp-runtime-authority, not akeyless mcp, for an agent that acts on systems; the first returns results, the second has get_secret and get_password\n2. Authenticate with a cloud identity, Kubernetes or Universal Identity rather than an access key, which the docs reserve for proofs of concept\n3. Use CLI 1.130.0 or later for either MCP server, and point the client at your Gateway URL\n4. Count identities and calls before scaling. The free plan allows 5 clients, and calls over a tier's cap (200 a minute on Silver) are billed as extra clients, not refused\n5. Pass the token in the JSON body of each POST, and page `/list-items` with `pagination-token`\n\n### Bitwarden Secrets Manager\n\n1. Create one machine account per agent with Can read on one project, and give its token an expiry date rather than the default of never\n2. Run the agent under `bws run -- \u003ccmd\u003e` so secrets arrive as environment variables and aren't written to disk or into the context\n3. Fetch with `bws secret list \u003cproject-id\u003e --output json` once per run; `bws secret get` needs the secret's UUID, not its name\n4. Set BWS_SERVER_URL for an EU organisation or a self-hosted server; the default is the US cloud\n5. Rotate the secret's value as well as revoking the token in an emergency, since a live session can read for up to an hour\n\n## Other comparisons with Akeyless (SecretlessAI and MCP server) or Bitwarden Secrets Manager\n\n- [1Password service accounts, SDKs and Environments MCP vs Akeyless (SecretlessAI and MCP server)](https://www.anchorterminal.com/compare/1password-vs-akeyless.md)\n- [1Password service accounts, SDKs and Environments MCP vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/1password-vs-bitwarden-secrets-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs AWS Secrets Manager](https://www.anchorterminal.com/compare/akeyless-vs-aws-secrets-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs Doppler](https://www.anchorterminal.com/compare/akeyless-vs-doppler.md)\n- [Akeyless (SecretlessAI and MCP server) vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/akeyless-vs-google-secret-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/akeyless-vs-hashicorp-vault.md)\n- [Akeyless (SecretlessAI and MCP server) vs Infisical](https://www.anchorterminal.com/compare/akeyless-vs-infisical.md)\n- [AWS Secrets Manager vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-bitwarden-secrets-manager.md)\n- [Bitwarden Secrets Manager vs Doppler](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-doppler.md)\n- [Bitwarden Secrets Manager vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-google-secret-manager.md)\n- [Bitwarden Secrets Manager vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-hashicorp-vault.md)\n- [Bitwarden Secrets Manager vs Infisical](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-infisical.md)\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-10-04",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.3",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Compare",
        "url": "https://www.anchorterminal.com/compare/"
      },
      {
        "name": "Akeyless (SecretlessAI and MCP server) vs Bitwarden Secrets Manager",
        "url": ""
      }
    ],
    "description": "Akeyless (SecretlessAI and MCP server) has a score of 73.7 (BB) against Bitwarden Secrets Manager's 57.1 (C). Both do secrets store. The largest gap is maintenance \u0026 community, 46 points. Category scores, facts, verdicts and agent notes side by side.",
    "facts": [
      "Akeyless (SecretlessAI and MCP server) BB 73.7",
      "Bitwarden Secrets Manager C 57.1",
      "scores"
    ],
    "h1": "Akeyless (SecretlessAI and MCP server) vs Bitwarden Secrets Manager",
    "image": "https://www.anchorterminal.com/assets/og/compare-akeyless-vs-bitwarden-secrets-manager.png",
    "path": "/compare/akeyless-vs-bitwarden-secrets-manager",
    "published": "2026-10-01",
    "section": "tools",
    "title": "Akeyless (SecretlessAI and MCP server) vs Bitwarden Secrets Manager",
    "toc": null,
    "updated": "2026-10-04",
    "url": "https://www.anchorterminal.com/compare/akeyless-vs-bitwarden-secrets-manager"
  },
  "tokens": {
    "markdown": 1850,
    "slim": 380
  },
  "version": 1
}
