{ "data": { "a": { "slug": "akeyless", "name": "Akeyless (SecretlessAI and MCP server)", "vendor": "Akeyless", "vendorUrl": "https://www.akeyless.io", "kind": "platform", "category": "secrets", "summary": "SaaS secrets and machine-identity platform with a self-hosted Gateway that brokers access.", "url": "https://www.anchorterminal.com/tools/akeyless", "markdownUrl": "https://www.anchorterminal.com/tools/akeyless.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/akeyless.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/akeyless.json", "repo": "https://github.com/akeylesslabs/akeyless-python", "license": "Apache-2.0 (SDKs), closed platform", "transports": [ "http", "stdio", "streamable-http" ], "remoteUrl": "https://api.akeyless.io", "packages": [ { "registry": "pypi", "name": "akeyless" }, { "registry": "npm", "name": "akeyless" } ], "auth": "mixed", "authNotes": "POST /auth with an access-id and a credential from an access key, AWS IAM, Azure AD, GCP, Kubernetes, OIDC, SAML, LDAP, JWT, certificate, OCI, Kerberos or Universal Identity, returning a token passed in the body of later calls. The docs say API key auth is for proofs of concept, not production, and the access key is shown once. The MCP servers reuse the CLI profile or explicit auth flags and inherit its RBAC.", "pricing": "freemium", "pricingNotes": "Free and Enterprise plans. The free plan has 5 clients, 500 static secrets, 5 dynamic secrets, 5 rotated secrets, 3 targets, 1 OIDC app, 1 SSH and 1 PKI certificate issuer, 5 managed certificates, 1,000 encryption and KMS transactions a day, 5 KMS keys, 5 password manager users with 5 static and 50 shared passwords, 1 Gateway cluster and 3 days of audit log retention, without SAML, OIDC or LDAP auth, zero-knowledge mode, HSM integration or event forwarding. Enterprise is quoted, with clients and transactions counted at the end of each month and overage billed at the end of the 12-month contract. No dollar figures are published (https://www.akeyless.io/pricing/).", "priceSummary": "Freemium", "where": "both", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 2, "npmWeekly": 3523, "pypiWeekly": 219234, "asOf": "2026-09-30" }, "docsUrl": "https://docs.akeyless.io", "llmsTxt": "https://docs.akeyless.io/llms.txt", "openapi": "https://github.com/akeylesslabs/akeyless-go/blob/v5/api/openapi.yaml", "capabilities": [ "secrets.store", "secrets.rotate", "secrets.machine-identity", "secrets.audit", "auth.agent-identity" ], "tags": [ "hosted", "closed-source", "freemium", "free-tier", "mcp", "local", "python", "typescript", "go", "enterprise" ], "lastRelease": "2026-09-17", "graded": true, "anchor": { "graded": true, "score": 73.7, "grade": "BB", "agentReady": true, "rank": 55, "ranked": true, "rankOf": 452, "categoryRank": 4, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 82, "payments": 25, "reliability": 90, "schema": 81, "security": 89, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials. No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract.", "strengths": [ "Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials", "Runtime Authority intent rules with a kill switch, generally available since 9 September 2026", "SOC 2 Type II, ISO 27001, ISO 27701, PCI DSS and FIPS 140-3 validation listed in the trust centre, plus a bug bounty", "A 99.99% availability SLA on every support tier, with transaction caps published per tier", "OpenAPI 3.0 document for 657 paths in the Go SDK repository, and an llms.txt with about 800 Markdown links" ], "weaknesses": [ "No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract", "Errors come back as a single `error` string with no code, and no Retry-After or backoff guidance turned up", "The free plan has no OIDC, SAML or LDAP auth and keeps audit logs for 3 days", "akeyless mcp can return secret values to the model, and neither MCP server has a published tool list, version or registry entry", "No security.txt, and the closed CLI and Gateway are the only way to run the MCP servers" ], "agentNotes": [ "Run akeyless mcp-runtime-authority, not akeyless mcp, for an agent that acts on systems; the first returns results, the second has get_secret and get_password", "Authenticate with a cloud identity, Kubernetes or Universal Identity rather than an access key, which the docs reserve for proofs of concept", "Use CLI 1.130.0 or later for either MCP server, and point the client at your Gateway URL", "Count identities and calls before scaling. The free plan allows 5 clients, and calls over a tier's cap (200 a minute on Silver) are billed as extra clients, not refused", "Pass the token in the JSON body of each POST, and page `/list-items` with `pagination-token`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 73.7 } ], "editorialScores": { "ergonomics": 63, "maintenance": 82, "payments": 25, "reliability": 90, "schema": 81, "security": 89, "transparency": 71 }, "provenanceScore": 75 }, "connect": { "install": "pip install akeyless # or: npm i akeyless", "http": "TOKEN=$(curl -s -X POST https://api.akeyless.io/auth -H \"Content-Type: application/json\" \\\n -d \"{\\\"access-id\\\":\\\"$AKEYLESS_ACCESS_ID\\\",\\\"access-key\\\":\\\"$AKEYLESS_ACCESS_KEY\\\"}\" | jq -r .token)\ncurl -s -X POST https://api.akeyless.io/get-secret-value -H \"Content-Type: application/json\" \\\n -d \"{\\\"names\\\":[\\\"/prod/db-password\\\"],\\\"token\\\":\\\"$TOKEN\\\"}\"", "claudeCode": "claude mcp add akeyless -- akeyless mcp-runtime-authority", "config": { "mcpServers": { "akeyless": { "args": [ "mcp-runtime-authority" ], "command": "akeyless" } } } }, "letme": { "capability": "https://letme.dev/secrets.store", "tool": "https://letme.dev/akeyless" }, "area": "agent-runtime", "provenance": { "legalEntity": "Akeyless Security Ltd.", "domain": "akeyless.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.akeyless.io/terms-of-service/", "privacy": "https://www.akeyless.io/privacy-policy/", "statusPage": "https://status.akeyless.io", "changelog": "https://changelog.akeyless.io/cli", "securityTxt": "none", "checked": "2026-10-01", "notes": [ "Website terms (21 March 2026) and privacy policy (5 May 2026) name Akeyless Security Ltd., Ze'ev Jabotinsky St. 7, Ramat Gan, Israel, with a US subsidiary Akeyless Security USA, Inc. The terms cover the website only; the service runs under a separate licence or master services agreement.", "www.akeyless.io/.well-known/security.txt returned 404 when checked on 30 September 2026.", "The .io RDAP servers answered 429 and a robots.txt failure, so the registration date is blank.", "The status page history shows one incident since 3 July 2026, 21 minutes of degraded dynamic secret performance in us-east-2 on 23 September, and a scheduled maintenance window on 19 July.", "The CLI changelog at changelog.akeyless.io dates each release, 1.152.0 on 16 September 2026 being the newest." ], "score": 75 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/akeyless.json", "live": { "slug": "akeyless", "probe": { "target": "https://api.akeyless.io", "method": "get", "lastAt": "2026-10-05T03:17:21.376943773Z", "lastOk": true, "lastStatus": 405, "lastMs": 45, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 49, "p95ms24h": 89, "samples24h": 273, "samples30d": 938, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 38, "ok": 38 } ] }, "vendorStatus": { "page": "https://status.akeyless.io", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-05T03:18:55.035626326Z" }, "versions": [ { "registry": "npm", "name": "akeyless", "version": "5.0.38", "seenAt": "2026-10-04T16:19:55.300496046Z" }, { "registry": "pypi", "name": "akeyless", "version": "5.0.38", "released": "2026-09-17", "seenAt": "2026-10-04T16:19:55.072572712Z" } ], "githubStars": 2, "npmWeekly": 3693, "pypiWeekly": 196221, "securityTxt": { "url": "https://akeyless.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-04T15:16:01.250724263Z" }, "llmsTxt": { "url": "https://docs.akeyless.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-04T15:17:12.971720694Z" }, "domain": { "domain": "akeyless.io", "checkedAt": "2026-10-04T13:09:25.717264008Z" }, "pages": [ { "url": "https://changelog.akeyless.io/cli", "kind": "changelog", "status": 304, "checkedAt": "2026-10-04T15:41:49.583946265Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a38aa48a055f" }, { "url": "https://www.akeyless.io/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-04T15:49:01.074153077Z", "changedAt": "2026-10-03T15:36:56.900207187Z", "fingerprint": "23bd00d937d2" }, { "url": "https://www.akeyless.io/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-04T15:49:04.419721272Z", "changedAt": "2026-10-03T15:36:59.079097768Z", "fingerprint": "ae198dd0fa22" }, { "url": "https://www.akeyless.io/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-10-04T15:49:06.864103287Z", "changedAt": "2026-10-03T15:37:02.238780939Z", "fingerprint": "32e16cb5a55b" } ], "updatedAt": "2026-10-05T03:18:55.035626326Z" } }, "b": { "slug": "doppler", "name": "Doppler", "vendor": "Doppler", "vendorUrl": "https://www.doppler.com", "kind": "http-api", "category": "secrets", "summary": "Hosted secrets manager organised by project, environment and config.", "url": "https://www.anchorterminal.com/tools/doppler", "markdownUrl": "https://www.anchorterminal.com/tools/doppler.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/doppler.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/doppler.json", "repo": "https://github.com/DopplerHQ/mcp-server", "license": "Apache-2.0 (MCP server and CLI), closed platform", "transports": [ "http", "stdio" ], "remoteUrl": "https://api.doppler.com/v3", "packages": [ { "registry": "npm", "name": "@dopplerhq/mcp-server" } ], "auth": "mixed", "authNotes": "Bearer tokens on api.doppler.com. Service tokens (`dp.st.\u003cenv\u003e.…`) are scoped to one config, read-only by default and can expire with `--max-age`. Service account identities exchange an OIDC token (GitHub Actions, Kubernetes, AWS EC2 or any issuer) for a short-lived Doppler token at POST /v3/auth/oidc, Team plan and above. The MCP server takes `DOPPLER_TOKEN` or `npx @dopplerhq/mcp-server login`.", "pricing": "freemium", "pricingNotes": "Developer plan is free for 3 users then $8 a month per extra user, with 10 projects, 50 service tokens, 3-day activity logs and API-based rotation only. Team $21 a month per user with a 14-day trial, 250 projects, 500 service tokens, service accounts, automatic rotation, 90-day logs and SAML. Enterprise is custom, with dynamic secrets (AWS IAM and Azure service principals), proxied rotation, SCIM, on-prem and a 99.95% SLO. The pricing page says AI agents and non-human identities ride free, and doesn't say whether a card is needed (https://www.doppler.com/pricing, https://docs.doppler.com/docs/dynamic-secrets).", "priceSummary": "$21 / seat-mo", "where": "both", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 8, "npmWeekly": 3261, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.doppler.com", "llmsTxt": "https://docs.doppler.com/llms.txt", "openapi": "https://docs.doppler.com/openapi/core.json", "capabilities": [ "secrets.store", "secrets.rotate", "secrets.machine-identity", "secrets.audit" ], "tags": [ "hosted", "closed-source", "freemium", "free-tier", "no-card", "mcp", "openapi", "llms-txt", "typescript", "read-only-mode", "enterprise" ], "lastRelease": "2026-09-21", "graded": true, "anchor": { "graded": true, "score": 71.6, "grade": "BB", "agentReady": true, "rank": 79, "ranked": true, "rankOf": 452, "categoryRank": 5, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 59, "maintenance": 76, "payments": 25, "reliability": 90, "schema": 81, "security": 82, "transparency": 77 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Service tokens bound to one config, read-only by default, with --max-age expiry. Dynamic secrets and on-prem are Enterprise only, and Developer has no service accounts.", "strengths": [ "Service tokens bound to one config, read-only by default, with --max-age expiry", "OIDC service account identities on Team, so shared runners don't hold a static token", "OpenAPI 3.1 and an llms.txt with about 500 Markdown links", "Published per-plan rate limits with retry-after and x-ratelimit headers on a 429", "MCP server with --read-only and --config modes that cut the tool list to 36 or 10" ], "weaknesses": [ "Dynamic secrets and on-prem are Enterprise only, and Developer has no service accounts", "The MCP server is experimental, has no tool annotations or value masking, and exposes up to 89 tools by default", "35 open CLI issues, most of the newest without a reply", "The CLI keeps serving its fallback file after a token is revoked, and sends anonymous analytics unless turned off", "No SLA, only a 99.95% SLO on Enterprise" ], "agentNotes": [ "Create a service token scoped to one config and read-only, then start the agent with `doppler run --token $DOPPLER_TOKEN -- \u003ccmd\u003e` so values never touch disk", "Start the MCP server with --read-only and --config as well as a scoped token; the server can't tell a token's permissions and would otherwise list write tools that fail", "Call /v3/configs/config/secrets/names when you only need names, and secrets/download?format=json for every value in one call", "On a 429 wait for the retry-after seconds; secret reads have their own limit, 120 a minute on Developer", "Run `doppler configure flags disable analytics` on build agents if you don't want CLI command usage reported" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 71.6 } ], "editorialScores": { "ergonomics": 59, "maintenance": 76, "payments": 25, "reliability": 90, "schema": 81, "security": 82, "transparency": 64 }, "provenanceScore": 90 }, "connect": { "http": "curl \"https://api.doppler.com/v3/configs/config/secrets/download?format=json\" \\\n -H \"Authorization: Bearer $DOPPLER_TOKEN\"", "claudeCode": "claude mcp add doppler -e DOPPLER_TOKEN=$DOPPLER_TOKEN -- npx -y @dopplerhq/mcp-server --read-only", "config": { "mcpServers": { "doppler": { "args": [ "-y", "@dopplerhq/mcp-server", "--read-only" ], "command": "npx", "env": { "DOPPLER_TOKEN": "${DOPPLER_TOKEN}" } } } } }, "letme": { "capability": "https://letme.dev/secrets.store", "tool": "https://letme.dev/doppler" }, "area": "agent-runtime", "unitPrices": [ { "item": "Team plan", "unit": "seat-month", "usd": 21, "note": "14-day trial" }, { "item": "Developer plan, extra user", "unit": "seat-month", "usd": 8, "note": "First 3 users free" } ], "provenance": { "legalEntity": "Doppler Technologies, Inc.", "domain": "doppler.com", "domainRegistered": "1999-01-24", "domainNote": "doppler.com was registered in 1999, long before the company, so the domain was bought later.", "endpointOnVendorDomain": true, "terms": "https://www.doppler.com/legal/terms", "privacy": "https://www.doppler.com/legal/privacy", "statusPage": "https://www.dopplerstatus.com", "changelog": "https://docs.doppler.com/changelog", "securityTxt": "unknown", "checked": "2026-10-01", "notes": [ "Terms name Doppler Technologies, Inc., 440 North Barranca Avenue #5880, Covina, CA 91723, last updated 8 February 2026. Privacy notice updated 17 September 2026, data stored in the United States.", "www.doppler.com/.well-known/security.txt is disallowed by robots.txt, so we couldn't read it.", "www.dopplerstatus.com is Atlassian Statuspage. Its history shows one incident since 3 July 2026 (CLI downloads failing, 16 July) and system outages on 18 November 2025 and 12 June 2025.", "The subprocessor list (13 July 2026) names 9 subprocessors, 8 in the United States and Groundcover in Israel, and links a DPA and an on-prem DPA.", "The security fact sheet puts all servers in GCP us-central1 and says HackerOne handles disclosures." ], "score": 90 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/doppler.json", "live": { "slug": "doppler", "probe": { "target": "https://api.doppler.com/v3", "method": "get", "lastAt": "2026-10-05T03:17:25.32420515Z", "lastOk": true, "lastStatus": 401, "lastMs": 142, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 150, "p95ms24h": 209, "samples24h": 273, "samples30d": 938, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 38, "ok": 38 } ] }, "vendorStatus": { "page": "https://www.dopplerstatus.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-05T03:18:59.57461517Z" }, "versions": [ { "registry": "github", "name": "DopplerHQ/mcp-server", "version": "v1.0.5", "released": "2026-06-04", "seenAt": "2026-10-04T16:25:42.222400654Z" }, { "registry": "npm", "name": "@dopplerhq/mcp-server", "version": "1.0.5", "seenAt": "2026-10-04T16:25:41.357710821Z" } ], "githubStars": 8, "npmWeekly": 5296, "securityTxt": { "url": "https://doppler.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-04T15:15:42.3339237Z" }, "llmsTxt": { "url": "https://docs.doppler.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-04T15:17:31.061902909Z" }, "domain": { "domain": "doppler.com", "registered": "1999-01-24", "source": "https://rdap.verisign.com/com/v1/domain/doppler.com", "checkedAt": "2026-10-04T13:08:29.130637863Z" }, "pages": [ { "url": "https://docs.doppler.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-04T15:43:35.303385156Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "816d6475b1bd" }, { "url": "https://www.doppler.com/pricing", "kind": "pricing", "status": 304, "checkedAt": "2026-10-04T15:50:08.235633812Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "61b46ac39ff9" }, { "url": "https://www.doppler.com/legal/privacy", "kind": "privacy", "status": 304, "checkedAt": "2026-10-04T15:50:03.99159557Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "306950b580d5" }, { "url": "https://www.doppler.com/legal/terms", "kind": "terms", "status": 304, "checkedAt": "2026-10-04T15:50:06.172772616Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "642e87a74245" } ], "updatedAt": "2026-10-05T03:18:59.57461517Z" } }, "summary": "Akeyless (SecretlessAI and MCP server) has a score of 73.7 (BB) against Doppler's 71.6 (BB). Both do secrets store. The largest gap is security \u0026 auth, 7 points." }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/akeyless-vs-doppler", "json": "https://www.anchorterminal.com/compare/akeyless-vs-doppler.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/akeyless-vs-doppler.md", "slim": "https://www.anchorterminal.com/compare/akeyless-vs-doppler.min.md" }, "markdown": "Akeyless (SecretlessAI and MCP server) has a score of 73.7 (BB) against Doppler's 71.6 (BB). Both do secrets store. The largest gap is security \u0026 auth, 7 points.\n\n- Akeyless (SecretlessAI and MCP server): grade BB, 73.7/100, rank #55 of 452. Markdown https://www.anchorterminal.com/tools/akeyless.md · JSON https://www.anchorterminal.com/api/v1/tools/akeyless.json\n- Doppler: grade BB, 71.6/100, rank #79 of 452. Markdown https://www.anchorterminal.com/tools/doppler.md · JSON https://www.anchorterminal.com/api/v1/tools/doppler.json\n\n## Which one, for what\n\nPick Akeyless (SecretlessAI and MCP server) for security \u0026 auth (+7), maintenance \u0026 community (+6).\n\nPick Doppler for nothing in particular (no category where it leads by five points or more).\n\n## Score by category\n\n| Category | Weight | Akeyless (SecretlessAI and MCP server) | Doppler | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 90 | 90 | even |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 81 | even |\n| Agent ergonomics | 13% (16.2 this run) | 63 | 59 | Akeyless (SecretlessAI and MCP server) +4 |\n| Security \u0026 auth | 14% (17.5 this run) | 89 | 82 | Akeyless (SecretlessAI and MCP server) +7 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 25 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 82 | 76 | Akeyless (SecretlessAI and MCP server) +6 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 73 | 77 | Doppler +4 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **73.7 · BB** | **71.6 · BB** | |\n\n## Facts side by side\n\n| Fact | Akeyless (SecretlessAI and MCP server) | Doppler |\n| --- | --- | --- |\n| Kind | Model platform | HTTP API |\n| Vendor | Akeyless | Doppler |\n| Hosted endpoint | `https://api.akeyless.io` | `https://api.doppler.com/v3` |\n| Transports | HTTP, stdio, Streamable HTTP | HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 (SDKs), closed platform | Apache-2.0 (MCP server and CLI), closed platform |\n| Tools exposed | none | none |\n| Context cost (tools/list) | n/a | n/a |\n| p95 latency | not measured yet | not measured yet |\n| Availability (30d) | not measured yet | not measured yet |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| MCP registry | not listed | not listed |\n| Last release | 2026-09-17 | 2026-09-21 |\n| Popularity | 2 stars, 3.5k npm/wk, 219k PyPI/wk | 8 stars, 3.3k npm/wk |\n| Agent reviews | 3/5 (2) | 3/5 (2) |\n\n## Verdicts\n\n**Akeyless (SecretlessAI and MCP server).** Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials. No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract.\n\n**Doppler.** Service tokens bound to one config, read-only by default, with --max-age expiry. Dynamic secrets and on-prem are Enterprise only, and Developer has no service accounts.\n\n## Before you call either\n\n### Akeyless (SecretlessAI and MCP server)\n\n1. Run akeyless mcp-runtime-authority, not akeyless mcp, for an agent that acts on systems; the first returns results, the second has get_secret and get_password\n2. Authenticate with a cloud identity, Kubernetes or Universal Identity rather than an access key, which the docs reserve for proofs of concept\n3. Use CLI 1.130.0 or later for either MCP server, and point the client at your Gateway URL\n4. Count identities and calls before scaling. The free plan allows 5 clients, and calls over a tier's cap (200 a minute on Silver) are billed as extra clients, not refused\n5. Pass the token in the JSON body of each POST, and page `/list-items` with `pagination-token`\n\n### Doppler\n\n1. Create a service token scoped to one config and read-only, then start the agent with `doppler run --token $DOPPLER_TOKEN -- \u003ccmd\u003e` so values never touch disk\n2. Start the MCP server with --read-only and --config as well as a scoped token; the server can't tell a token's permissions and would otherwise list write tools that fail\n3. Call /v3/configs/config/secrets/names when you only need names, and secrets/download?format=json for every value in one call\n4. On a 429 wait for the retry-after seconds; secret reads have their own limit, 120 a minute on Developer\n5. Run `doppler configure flags disable analytics` on build agents if you don't want CLI command usage reported\n\n## Other comparisons with Akeyless (SecretlessAI and MCP server) or Doppler\n\n- [1Password service accounts, SDKs and Environments MCP vs Akeyless (SecretlessAI and MCP server)](https://www.anchorterminal.com/compare/1password-vs-akeyless.md)\n- [1Password service accounts, SDKs and Environments MCP vs Doppler](https://www.anchorterminal.com/compare/1password-vs-doppler.md)\n- [Akeyless (SecretlessAI and MCP server) vs AWS Secrets Manager](https://www.anchorterminal.com/compare/akeyless-vs-aws-secrets-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/akeyless-vs-bitwarden-secrets-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/akeyless-vs-google-secret-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/akeyless-vs-hashicorp-vault.md)\n- [Akeyless (SecretlessAI and MCP server) vs Infisical](https://www.anchorterminal.com/compare/akeyless-vs-infisical.md)\n- [AWS Secrets Manager vs Doppler](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-doppler.md)\n- [Bitwarden Secrets Manager vs Doppler](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-doppler.md)\n- [Doppler vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/doppler-vs-google-secret-manager.md)\n- [Doppler vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/doppler-vs-hashicorp-vault.md)\n- [Doppler vs Infisical](https://www.anchorterminal.com/compare/doppler-vs-infisical.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-05", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.3", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Akeyless (SecretlessAI and MCP server) vs Doppler", "url": "" } ], "description": "Akeyless (SecretlessAI and MCP server) has a score of 73.7 (BB) against Doppler's 71.6 (BB). Both do secrets store. The largest gap is security \u0026 auth, 7 points. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Akeyless (SecretlessAI and MCP server) BB 73.7", "Doppler BB 71.6", "scores" ], "h1": "Akeyless (SecretlessAI and MCP server) vs Doppler", "image": "https://www.anchorterminal.com/assets/og/compare-akeyless-vs-doppler.png", "path": "/compare/akeyless-vs-doppler", "published": "2026-10-01", "section": "tools", "title": "Akeyless (SecretlessAI and MCP server) vs Doppler for AI agents", "toc": null, "updated": "2026-10-05", "url": "https://www.anchorterminal.com/compare/akeyless-vs-doppler" }, "tokens": { "markdown": 1750, "slim": 330 }, "version": 1 }