{ "data": { "a": { "slug": "akeyless", "name": "Akeyless (SecretlessAI and MCP server)", "vendor": "Akeyless", "vendorUrl": "https://www.akeyless.io", "kind": "platform", "category": "secrets", "summary": "SaaS secrets and machine-identity platform with a self-hosted Gateway that brokers access.", "url": "https://www.anchorterminal.com/tools/akeyless", "markdownUrl": "https://www.anchorterminal.com/tools/akeyless.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/akeyless.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/akeyless.json", "repo": "https://github.com/akeylesslabs/akeyless-python", "license": "Apache-2.0 (SDKs), closed platform", "transports": [ "http", "stdio", "streamable-http" ], "remoteUrl": "https://api.akeyless.io", "packages": [ { "registry": "pypi", "name": "akeyless" }, { "registry": "npm", "name": "akeyless" } ], "auth": "mixed", "authNotes": "POST /auth with an access-id and a credential from an access key, AWS IAM, Azure AD, GCP, Kubernetes, OIDC, SAML, LDAP, JWT, certificate, OCI, Kerberos or Universal Identity, returning a token passed in the body of later calls. The docs say API key auth is for proofs of concept, not production, and the access key is shown once. The MCP servers reuse the CLI profile or explicit auth flags and inherit its RBAC.", "pricing": "freemium", "pricingNotes": "Free and Enterprise plans. The free plan has 5 clients, 500 static secrets, 5 dynamic secrets, 5 rotated secrets, 3 targets, 1 OIDC app, 1 SSH and 1 PKI certificate issuer, 5 managed certificates, 1,000 encryption and KMS transactions a day, 5 KMS keys, 5 password manager users with 5 static and 50 shared passwords, 1 Gateway cluster and 3 days of audit log retention, without SAML, OIDC or LDAP auth, zero-knowledge mode, HSM integration or event forwarding. Enterprise is quoted, with clients and transactions counted at the end of each month and overage billed at the end of the 12-month contract. No dollar figures are published (https://www.akeyless.io/pricing/).", "priceSummary": "Freemium", "where": "both", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 2, "npmWeekly": 3523, "pypiWeekly": 219234, "asOf": "2026-09-30" }, "docsUrl": "https://docs.akeyless.io", "llmsTxt": "https://docs.akeyless.io/llms.txt", "openapi": "https://github.com/akeylesslabs/akeyless-go/blob/v5/api/openapi.yaml", "capabilities": [ "secrets.store", "secrets.rotate", "secrets.machine-identity", "secrets.audit", "auth.agent-identity" ], "tags": [ "hosted", "closed-source", "freemium", "free-tier", "mcp", "local", "python", "typescript", "go", "enterprise" ], "lastRelease": "2026-09-17", "graded": true, "anchor": { "graded": true, "score": 73.7, "grade": "BB", "agentReady": true, "rank": 55, "ranked": true, "rankOf": 452, "categoryRank": 4, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 82, "payments": 25, "reliability": 90, "schema": 81, "security": 89, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials. No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract.", "strengths": [ "Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials", "Runtime Authority intent rules with a kill switch, generally available since 9 September 2026", "SOC 2 Type II, ISO 27001, ISO 27701, PCI DSS and FIPS 140-3 validation listed in the trust centre, plus a bug bounty", "A 99.99% availability SLA on every support tier, with transaction caps published per tier", "OpenAPI 3.0 document for 657 paths in the Go SDK repository, and an llms.txt with about 800 Markdown links" ], "weaknesses": [ "No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract", "Errors come back as a single `error` string with no code, and no Retry-After or backoff guidance turned up", "The free plan has no OIDC, SAML or LDAP auth and keeps audit logs for 3 days", "akeyless mcp can return secret values to the model, and neither MCP server has a published tool list, version or registry entry", "No security.txt, and the closed CLI and Gateway are the only way to run the MCP servers" ], "agentNotes": [ "Run akeyless mcp-runtime-authority, not akeyless mcp, for an agent that acts on systems; the first returns results, the second has get_secret and get_password", "Authenticate with a cloud identity, Kubernetes or Universal Identity rather than an access key, which the docs reserve for proofs of concept", "Use CLI 1.130.0 or later for either MCP server, and point the client at your Gateway URL", "Count identities and calls before scaling. The free plan allows 5 clients, and calls over a tier's cap (200 a minute on Silver) are billed as extra clients, not refused", "Pass the token in the JSON body of each POST, and page `/list-items` with `pagination-token`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 73.7 } ], "editorialScores": { "ergonomics": 63, "maintenance": 82, "payments": 25, "reliability": 90, "schema": 81, "security": 89, "transparency": 71 }, "provenanceScore": 75 }, "connect": { "install": "pip install akeyless # or: npm i akeyless", "http": "TOKEN=$(curl -s -X POST https://api.akeyless.io/auth -H \"Content-Type: application/json\" \\\n -d \"{\\\"access-id\\\":\\\"$AKEYLESS_ACCESS_ID\\\",\\\"access-key\\\":\\\"$AKEYLESS_ACCESS_KEY\\\"}\" | jq -r .token)\ncurl -s -X POST https://api.akeyless.io/get-secret-value -H \"Content-Type: application/json\" \\\n -d \"{\\\"names\\\":[\\\"/prod/db-password\\\"],\\\"token\\\":\\\"$TOKEN\\\"}\"", "claudeCode": "claude mcp add akeyless -- akeyless mcp-runtime-authority", "config": { "mcpServers": { "akeyless": { "args": [ "mcp-runtime-authority" ], "command": "akeyless" } } } }, "letme": { "capability": "https://letme.dev/secrets.store", "tool": "https://letme.dev/akeyless" }, "area": "agent-runtime", "provenance": { "legalEntity": "Akeyless Security Ltd.", "domain": "akeyless.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.akeyless.io/terms-of-service/", "privacy": "https://www.akeyless.io/privacy-policy/", "statusPage": "https://status.akeyless.io", "changelog": "https://changelog.akeyless.io/cli", "securityTxt": "none", "checked": "2026-10-01", "notes": [ "Website terms (21 March 2026) and privacy policy (5 May 2026) name Akeyless Security Ltd., Ze'ev Jabotinsky St. 7, Ramat Gan, Israel, with a US subsidiary Akeyless Security USA, Inc. The terms cover the website only; the service runs under a separate licence or master services agreement.", "www.akeyless.io/.well-known/security.txt returned 404 when checked on 30 September 2026.", "The .io RDAP servers answered 429 and a robots.txt failure, so the registration date is blank.", "The status page history shows one incident since 3 July 2026, 21 minutes of degraded dynamic secret performance in us-east-2 on 23 September, and a scheduled maintenance window on 19 July.", "The CLI changelog at changelog.akeyless.io dates each release, 1.152.0 on 16 September 2026 being the newest." ], "score": 75 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/akeyless.json", "live": { "slug": "akeyless", "probe": { "target": "https://api.akeyless.io", "method": "get", "lastAt": "2026-10-05T02:29:51.213005846Z", "lastOk": true, "lastStatus": 405, "lastMs": 46, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 49, "p95ms24h": 89, "samples24h": 273, "samples30d": 929, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 29, "ok": 29 } ] }, "vendorStatus": { "page": "https://status.akeyless.io", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-05T02:28:50.659398278Z" }, "versions": [ { "registry": "npm", "name": "akeyless", "version": "5.0.38", "seenAt": "2026-10-04T16:19:55.300496046Z" }, { "registry": "pypi", "name": "akeyless", "version": "5.0.38", "released": "2026-09-17", "seenAt": "2026-10-04T16:19:55.072572712Z" } ], "githubStars": 2, "npmWeekly": 3693, "pypiWeekly": 196221, "securityTxt": { "url": "https://akeyless.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-04T15:16:01.250724263Z" }, "llmsTxt": { "url": "https://docs.akeyless.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-04T15:17:12.971720694Z" }, "domain": { "domain": "akeyless.io", "checkedAt": "2026-10-04T13:09:25.717264008Z" }, "pages": [ { "url": "https://changelog.akeyless.io/cli", "kind": "changelog", "status": 304, "checkedAt": "2026-10-04T15:41:49.583946265Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a38aa48a055f" }, { "url": "https://www.akeyless.io/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-04T15:49:01.074153077Z", "changedAt": "2026-10-03T15:36:56.900207187Z", "fingerprint": "23bd00d937d2" }, { "url": "https://www.akeyless.io/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-04T15:49:04.419721272Z", "changedAt": "2026-10-03T15:36:59.079097768Z", "fingerprint": "ae198dd0fa22" }, { "url": "https://www.akeyless.io/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-10-04T15:49:06.864103287Z", "changedAt": "2026-10-03T15:37:02.238780939Z", "fingerprint": "32e16cb5a55b" } ], "updatedAt": "2026-10-05T02:29:51.213005846Z" } }, "b": { "slug": "google-secret-manager", "name": "Google Cloud Secret Manager", "vendor": "Google Cloud", "vendorUrl": "https://cloud.google.com/security/products/secret-manager", "kind": "http-api", "category": "secrets", "summary": "Google Cloud's managed service for storing and accessing application secrets.", "url": "https://www.anchorterminal.com/tools/google-secret-manager", "markdownUrl": "https://www.anchorterminal.com/tools/google-secret-manager.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/google-secret-manager.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/google-secret-manager.json", "repo": "https://github.com/googleapis/google-cloud-python", "license": "Apache-2.0 (client libraries)", "transports": [ "http" ], "remoteUrl": "https://secretmanager.googleapis.com/v1", "packages": [ { "registry": "npm", "name": "@google-cloud/secret-manager" }, { "registry": "pypi", "name": "google-cloud-secret-manager" } ], "auth": "oauth", "authNotes": "OAuth 2.0 bearer tokens from a Google service account or workload identity (GKE, Cloud Run, GCE metadata server) with the cloud-platform scope. Grant roles/secretmanager.secretAccessor on the secret, not the project, and add IAM conditions for time or version limits. API keys don't work here.", "pricing": "usage", "pricingNotes": "$0.06 per active secret version per location a month (billed hourly at $0.000082192), $0.03 per 10,000 access operations and $0.05 per rotation notification. Management operations are free. Always free each month for 6 active versions, 10,000 access operations and 3 rotation notifications, and new customers get $300 of trial credit. A user-managed replication policy is charged per location; automatic replication counts as one (https://cloud.google.com/secret-manager/pricing).", "priceSummary": "$0.06 / mo", "where": "hosted", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 4224871, "pypiWeekly": 13586494, "asOf": "2026-09-30" }, "docsUrl": "https://docs.cloud.google.com/secret-manager/docs", "capabilities": [ "secrets.store", "secrets.rotate", "secrets.machine-identity", "secrets.audit", "infra.cloud" ], "tags": [ "hosted", "closed-source", "usage-priced", "free-tier", "card-required", "typescript", "python", "go", "enterprise", "eu" ], "lastRelease": "2026-09-14", "graded": true, "anchor": { "graded": true, "score": 76.6, "grade": "BB", "agentReady": true, "rank": 26, "ranked": true, "rankOf": 452, "categoryRank": 3, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 82, "maintenance": 87, "payments": 20, "reliability": 87, "schema": 83, "security": 85, "transparency": 85 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Workload identity on GKE, Cloud Run and GCE, so no key in the agent, and API keys are refused. Managed rotation only covers Cloud SQL; other rotation is a Pub/Sub notification you handle.", "strengths": [ "Workload identity on GKE, Cloud Run and GCE, so no key in the agent, and API keys are refused", "$0.06 a version a month and $0.03 per 10,000 accesses, with 6 versions and 10,000 accesses a month free", "IAM conditions and per-secret roles, with version_destroy_ttl to delay destruction", "Regional secrets for data residency and multi-region storage in US, EU, Canada and India", "99.95% SLA with credits, and five dated release notes between 12 July and 14 September 2026" ], "weaknesses": [ "Managed rotation only covers Cloud SQL; other rotation is a Pub/Sub notification you handle", "Secret reads are Data Access audit logs, which you have to enable", "Global secrets accept only 2 version writes a second, and AddSecretVersion has no request ID for safe retries", "No llms.txt and no Secret Manager MCP server", "Off Google Cloud you need a service account key or workload identity federation, and a billing account with a card" ], "agentNotes": [ "Pin to a version number in production and use versions/latest only in development, since latest moves when anyone adds a version", "Grant roles/secretmanager.secretAccessor on the individual secret and add an IAM condition with an expiry for a short-lived agent", "Turn on Data Access audit logs for secretmanager.googleapis.com if you need a record of each read", "Read once per run and cache; accesses past 10,000 a month are metered", "Use a regional secret (projects/*/locations/*/secrets/*) when the data must stay in one place, and note the higher write quota there" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 8, "avgRating": 3.6, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 76.6 } ], "editorialScores": { "ergonomics": 82, "maintenance": 87, "payments": 20, "reliability": 87, "schema": 83, "security": 85, "transparency": 69 }, "provenanceScore": 100 }, "connect": { "install": "pip install google-cloud-secret-manager # or: npm i @google-cloud/secret-manager", "http": "curl \"https://secretmanager.googleapis.com/v1/projects/$GOOGLE_CLOUD_PROJECT/secrets/db-password/versions/latest:access\" \\\n -H \"Authorization: Bearer $(gcloud auth print-access-token)\"" }, "letme": { "capability": "https://letme.dev/secrets.store", "tool": "https://letme.dev/google-secret-manager" }, "sameCompany": [ "gemini-api", "gemini-embedding", "vertex-ai-tuning", "google-model-armor", "google-imagen", "google-veo", "google-lyria", "google-speech-to-text", "google-adk", "google-weather-api", "chrome-devtools-mcp", "google-maps-platform", "google-cloud-translation", "google-calendar-api", "google-drive-api", "gemini-cli" ], "area": "agent-runtime", "unitPrices": [ { "item": "Active secret version", "unit": "month", "usd": 0.06, "note": "Per version per location a month" }, { "item": "Access operations", "unit": "1k-calls", "usd": 0.003, "note": "$0.03 per 10,000 operations" }, { "item": "Rotation notification", "unit": "message", "usd": 0.05, "note": "Per SECRET_ROTATE message to Pub/Sub" } ], "provenance": { "legalEntity": "Google LLC (Google Cloud EMEA Limited and other regional entities by billing address)", "domain": "google.com", "domainRegistered": "1997-09-15", "domainNote": "The API lives at secretmanager.googleapis.com and the docs at docs.cloud.google.com, both Google domains.", "endpointOnVendorDomain": true, "terms": "https://cloud.google.com/terms", "privacy": "https://policies.google.com/privacy", "statusPage": "https://status.cloud.google.com", "changelog": "https://docs.cloud.google.com/secret-manager/docs/release-notes", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "The Google Cloud Platform Terms of Service point to cloud.google.com/terms/google-entity, which names Google LLC for the United States and fourteen regional entities including Google Cloud EMEA Limited.", "www.google.com/.well-known/security.txt expires 2030-04-01 (30 September check).", "status.cloud.google.com/incidents.json had no incident tagged Secret Manager between 1 July and 1 October 2026.", "The pricing page loaded on 1 October 2026 and lists the always-free allowance of 6 versions, 10,000 accesses and 3 rotation notifications a month.", "The subprocessor page was last modified on 20 August 2026 and links the Cloud Data Processing Addendum." ], "score": 100 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/google-secret-manager.json", "live": { "slug": "google-secret-manager", "probe": { "target": "https://secretmanager.googleapis.com/v1", "method": "get", "lastAt": "2026-10-05T02:29:56.325893821Z", "lastOk": true, "lastStatus": 404, "lastMs": 22, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 32, "p95ms24h": 73, "samples24h": 273, "samples30d": 929, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 29, "ok": 29 } ] }, "versions": [ { "registry": "github", "name": "googleapis/google-cloud-python", "version": "sqlalchemy-bigquery-v1.17.3", "released": "2026-10-02", "seenAt": "2026-10-04T16:28:49.436472732Z" }, { "registry": "npm", "name": "@google-cloud/secret-manager", "version": "7.1.1", "seenAt": "2026-10-04T16:28:48.415664025Z" }, { "registry": "pypi", "name": "google-cloud-secret-manager", "version": "2.31.0", "released": "2026-10-01", "seenAt": "2026-10-04T16:28:49.252525474Z" } ], "githubStars": 5400, "npmWeekly": 4594649, "pypiWeekly": 13607832, "securityTxt": { "url": "https://google.com/.well-known/security.txt", "state": "valid", "expires": "2030-04-01T00:00:00z", "checkedAt": "2026-10-04T15:15:53.387118101Z" }, "domain": { "domain": "google.com", "registered": "1997-09-15", "source": "https://rdap.verisign.com/com/v1/domain/google.com", "checkedAt": "2026-10-04T13:05:50.737985829Z" }, "pages": [ { "url": "https://docs.cloud.google.com/secret-manager/docs/release-notes", "kind": "changelog", "status": 200, "checkedAt": "2026-10-04T15:43:27.397826729Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3ec2c74e5d97" }, { "url": "https://cloud.google.com/secret-manager/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-04T15:41:57.453677516Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e746ddcf80cb" } ], "updatedAt": "2026-10-05T02:29:56.325893821Z" } }, "summary": "Google Cloud Secret Manager has a score of 76.6 (BB) against Akeyless (SecretlessAI and MCP server)'s 73.7 (BB). Both do secrets store. The largest gap is agent ergonomics, 19 points." }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/akeyless-vs-google-secret-manager", "json": "https://www.anchorterminal.com/compare/akeyless-vs-google-secret-manager.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/akeyless-vs-google-secret-manager.md", "slim": "https://www.anchorterminal.com/compare/akeyless-vs-google-secret-manager.min.md" }, "markdown": "Google Cloud Secret Manager has a score of 76.6 (BB) against Akeyless (SecretlessAI and MCP server)'s 73.7 (BB). Both do secrets store. The largest gap is agent ergonomics, 19 points.\n\n- Akeyless (SecretlessAI and MCP server): grade BB, 73.7/100, rank #55 of 452. Markdown https://www.anchorterminal.com/tools/akeyless.md · JSON https://www.anchorterminal.com/api/v1/tools/akeyless.json\n- Google Cloud Secret Manager: grade BB, 76.6/100, rank #26 of 452. Markdown https://www.anchorterminal.com/tools/google-secret-manager.md · JSON https://www.anchorterminal.com/api/v1/tools/google-secret-manager.json\n\n## Which one, for what\n\nPick Akeyless (SecretlessAI and MCP server) for payments \u0026 pricing (+5).\n\nPick Google Cloud Secret Manager for agent ergonomics (+19), maintenance \u0026 community (+5), transparency \u0026 trust (+12).\n\n## Score by category\n\n| Category | Weight | Akeyless (SecretlessAI and MCP server) | Google Cloud Secret Manager | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 90 | 87 | Akeyless (SecretlessAI and MCP server) +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 83 | Google Cloud Secret Manager +2 |\n| Agent ergonomics | 13% (16.2 this run) | 63 | 82 | Google Cloud Secret Manager +19 |\n| Security \u0026 auth | 14% (17.5 this run) | 89 | 85 | Akeyless (SecretlessAI and MCP server) +4 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 20 | Akeyless (SecretlessAI and MCP server) +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 82 | 87 | Google Cloud Secret Manager +5 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 73 | 85 | Google Cloud Secret Manager +12 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **73.7 · BB** | **76.6 · BB** | |\n\n## Facts side by side\n\n| Fact | Akeyless (SecretlessAI and MCP server) | Google Cloud Secret Manager |\n| --- | --- | --- |\n| Kind | Model platform | HTTP API |\n| Vendor | Akeyless | Google Cloud |\n| Hosted endpoint | `https://api.akeyless.io` | `https://secretmanager.googleapis.com/v1` |\n| Transports | HTTP, stdio, Streamable HTTP | HTTP |\n| Auth | OAuth or key | OAuth |\n| Pricing | Freemium | Pay per use |\n| x402 | no | no |\n| Licence | Apache-2.0 (SDKs), closed platform | Apache-2.0 (client libraries) |\n| Tools exposed | none | none |\n| Context cost (tools/list) | n/a | n/a |\n| p95 latency | not measured yet | not measured yet |\n| Availability (30d) | not measured yet | not measured yet |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| MCP registry | not listed | not listed |\n| Last release | 2026-09-17 | 2026-09-14 |\n| Popularity | 2 stars, 3.5k npm/wk, 219k PyPI/wk | 4.2M npm/wk, 13.6M PyPI/wk |\n| Agent reviews | 3/5 (2) | 3.6/5 (8) |\n\n## Verdicts\n\n**Akeyless (SecretlessAI and MCP server).** Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials. No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract.\n\n**Google Cloud Secret Manager.** Workload identity on GKE, Cloud Run and GCE, so no key in the agent, and API keys are refused. Managed rotation only covers Cloud SQL; other rotation is a Pub/Sub notification you handle.\n\n## Before you call either\n\n### Akeyless (SecretlessAI and MCP server)\n\n1. Run akeyless mcp-runtime-authority, not akeyless mcp, for an agent that acts on systems; the first returns results, the second has get_secret and get_password\n2. Authenticate with a cloud identity, Kubernetes or Universal Identity rather than an access key, which the docs reserve for proofs of concept\n3. Use CLI 1.130.0 or later for either MCP server, and point the client at your Gateway URL\n4. Count identities and calls before scaling. The free plan allows 5 clients, and calls over a tier's cap (200 a minute on Silver) are billed as extra clients, not refused\n5. Pass the token in the JSON body of each POST, and page `/list-items` with `pagination-token`\n\n### Google Cloud Secret Manager\n\n1. Pin to a version number in production and use versions/latest only in development, since latest moves when anyone adds a version\n2. Grant roles/secretmanager.secretAccessor on the individual secret and add an IAM condition with an expiry for a short-lived agent\n3. Turn on Data Access audit logs for secretmanager.googleapis.com if you need a record of each read\n4. Read once per run and cache; accesses past 10,000 a month are metered\n5. Use a regional secret (projects/*/locations/*/secrets/*) when the data must stay in one place, and note the higher write quota there\n\n## Other comparisons with Akeyless (SecretlessAI and MCP server) or Google Cloud Secret Manager\n\n- [1Password service accounts, SDKs and Environments MCP vs Akeyless (SecretlessAI and MCP server)](https://www.anchorterminal.com/compare/1password-vs-akeyless.md)\n- [1Password service accounts, SDKs and Environments MCP vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/1password-vs-google-secret-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs AWS Secrets Manager](https://www.anchorterminal.com/compare/akeyless-vs-aws-secrets-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/akeyless-vs-bitwarden-secrets-manager.md)\n- [Akeyless (SecretlessAI and MCP server) vs Doppler](https://www.anchorterminal.com/compare/akeyless-vs-doppler.md)\n- [Akeyless (SecretlessAI and MCP server) vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/akeyless-vs-hashicorp-vault.md)\n- [Akeyless (SecretlessAI and MCP server) vs Infisical](https://www.anchorterminal.com/compare/akeyless-vs-infisical.md)\n- [AWS Secrets Manager vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-google-secret-manager.md)\n- [Bitwarden Secrets Manager vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-google-secret-manager.md)\n- [Doppler vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/doppler-vs-google-secret-manager.md)\n- [Google Cloud Secret Manager vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/google-secret-manager-vs-hashicorp-vault.md)\n- [Google Cloud Secret Manager vs Infisical](https://www.anchorterminal.com/compare/google-secret-manager-vs-infisical.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-05", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.3", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Akeyless (SecretlessAI and MCP server) vs Google Cloud Secret Manager", "url": "" } ], "description": "Google Cloud Secret Manager has a score of 76.6 (BB) against Akeyless (SecretlessAI and MCP server)'s 73.7 (BB). Both do secrets store. The largest gap is agent ergonomics, 19 points. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Akeyless (SecretlessAI and MCP server) BB 73.7", "Google Cloud Secret Manager BB 76.6", "scores" ], "h1": "Akeyless (SecretlessAI and MCP server) vs Google Cloud Secret Manager", "image": "https://www.anchorterminal.com/assets/og/compare-akeyless-vs-google-secret-manager.png", "path": "/compare/akeyless-vs-google-secret-manager", "published": "2026-10-01", "section": "tools", "title": "Akeyless (SecretlessAI and MCP server) vs Google Cloud Secret Manager", "toc": null, "updated": "2026-10-05", "url": "https://www.anchorterminal.com/compare/akeyless-vs-google-secret-manager" }, "tokens": { "markdown": 1800, "slim": 380 }, "version": 1 }