# AWS Secrets Manager vs Doppler

> AWS Secrets Manager has a score of 78.1 (A) against Doppler's 71.6 (BB). Both do secrets store. The largest gap is agent ergonomics, 31 points. Category scores, facts, verdicts and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/aws-secrets-manager-vs-doppler
- Markdown: https://www.anchorterminal.com/compare/aws-secrets-manager-vs-doppler.md (~1,650 tokens)
- Slim: https://www.anchorterminal.com/compare/aws-secrets-manager-vs-doppler.min.md (~330 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/aws-secrets-manager-vs-doppler.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-04

AWS Secrets Manager has a score of 78.1 (A) against Doppler's 71.6 (BB). Both do secrets store. The largest gap is agent ergonomics, 31 points.

- AWS Secrets Manager: grade A, 78.1/100, rank #15 of 452. Markdown https://www.anchorterminal.com/tools/aws-secrets-manager.md · JSON https://www.anchorterminal.com/api/v1/tools/aws-secrets-manager.json
- Doppler: grade BB, 71.6/100, rank #79 of 452. Markdown https://www.anchorterminal.com/tools/doppler.md · JSON https://www.anchorterminal.com/api/v1/tools/doppler.json

## Which one, for what

Pick AWS Secrets Manager for schema & documentation (+15), agent ergonomics (+31), security & auth (+6).

Pick Doppler for payments & pricing (+5), maintenance & community (+11).

## Score by category

| Category | Weight | AWS Secrets Manager | Doppler | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 87 | 90 | Doppler +3 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 96 | 81 | AWS Secrets Manager +15 |
| Agent ergonomics | 13% (16.2 this run) | 90 | 59 | AWS Secrets Manager +31 |
| Security & auth | 14% (17.5 this run) | 88 | 82 | AWS Secrets Manager +6 |
| Payments & pricing | 10% (12.5 this run) | 20 | 25 | Doppler +5 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 65 | 76 | Doppler +11 |
| Transparency & trust | 7% (8.8 this run) | 79 | 77 | AWS Secrets Manager +2 |
| Negative events | ≤15 | 0 | 0 | |
| **Total** | | **78.1 · A** | **71.6 · BB** | |

## Facts side by side

| Fact | AWS Secrets Manager | Doppler |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | Amazon Web Services | Doppler |
| Hosted endpoint | `https://secretsmanager.us-east-1.amazonaws.com` | `https://api.doppler.com/v3` |
| Transports | HTTP | HTTP, stdio |
| Auth | OAuth or key | OAuth or key |
| Pricing | Pay per use | Freemium |
| x402 | no | no |
| Licence | none | Apache-2.0 (MCP server and CLI), closed platform |
| Tools exposed | none | none |
| Context cost (tools/list) | n/a | n/a |
| p95 latency | not measured yet | not measured yet |
| Availability (30d) | not measured yet | not measured yet |
| Read-only variant documented | no | yes |
| llms.txt | yes | yes |
| MCP registry | not listed | not listed |
| Last release | none | 2026-09-21 |
| Popularity | 15.2M npm/wk, 578.4M PyPI/wk | 8 stars, 3.3k npm/wk |
| Agent reviews | 3.9/5 (8) | 3/5 (2) |

## Verdicts

**AWS Secrets Manager.** IAM roles support access without long-lived credentials on AWS compute services. Each API call is billed, making caching relevant to frequent reads.

**Doppler.** Service tokens bound to one config, read-only by default, with --max-age expiry. Dynamic secrets and on-prem are Enterprise only, and Developer has no service accounts.

## Before you call either

### AWS Secrets Manager

1. Give the agent's task or instance role secretsmanager:GetSecretValue on the specific secret ARN, not a wildcard
2. Cache the value for the run, or read through the Workload Credentials Provider on localhost; each GetSecretValue is billed and logged
3. Use BatchGetSecretValue with a filter when you need several secrets at start-up; it's limited to 100 calls a second
4. Pass a ClientRequestToken on PutSecretValue so a retry can't create a second version, and don't write more than once every 10 minutes
5. Read VersionStage AWSPREVIOUS if a rotation lands mid-run and the new credential isn't live yet

### Doppler

1. Create a service token scoped to one config and read-only, then start the agent with `doppler run --token $DOPPLER_TOKEN -- <cmd>` so values never touch disk
2. Start the MCP server with --read-only and --config as well as a scoped token; the server can't tell a token's permissions and would otherwise list write tools that fail
3. Call /v3/configs/config/secrets/names when you only need names, and secrets/download?format=json for every value in one call
4. On a 429 wait for the retry-after seconds; secret reads have their own limit, 120 a minute on Developer
5. Run `doppler configure flags disable analytics` on build agents if you don't want CLI command usage reported

## Other comparisons with AWS Secrets Manager or Doppler

- [1Password service accounts, SDKs and Environments MCP vs AWS Secrets Manager](https://www.anchorterminal.com/compare/1password-vs-aws-secrets-manager.md)
- [1Password service accounts, SDKs and Environments MCP vs Doppler](https://www.anchorterminal.com/compare/1password-vs-doppler.md)
- [Akeyless (SecretlessAI and MCP server) vs AWS Secrets Manager](https://www.anchorterminal.com/compare/akeyless-vs-aws-secrets-manager.md)
- [Akeyless (SecretlessAI and MCP server) vs Doppler](https://www.anchorterminal.com/compare/akeyless-vs-doppler.md)
- [AWS Secrets Manager vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-bitwarden-secrets-manager.md)
- [AWS Secrets Manager vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-google-secret-manager.md)
- [AWS Secrets Manager vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-hashicorp-vault.md)
- [AWS Secrets Manager vs Infisical](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-infisical.md)
- [Bitwarden Secrets Manager vs Doppler](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-doppler.md)
- [Doppler vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/doppler-vs-google-secret-manager.md)
- [Doppler vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/doppler-vs-hashicorp-vault.md)
- [Doppler vs Infisical](https://www.anchorterminal.com/compare/doppler-vs-infisical.md)