# Bitwarden Secrets Manager vs Doppler

> Doppler has a score of 71.6 (BB) against Bitwarden Secrets Manager's 57.1 (C). Both do secrets store. The largest gap is maintenance & community, 40 points. Category scores, facts, verdicts and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-doppler
- Markdown: https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-doppler.md (~1,700 tokens)
- Slim: https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-doppler.min.md (~380 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-doppler.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-04

Doppler has a score of 71.6 (BB) against Bitwarden Secrets Manager's 57.1 (C). Both do secrets store. The largest gap is maintenance & community, 40 points.

- Bitwarden Secrets Manager: grade C, 57.1/100, rank #297 of 452. Markdown https://www.anchorterminal.com/tools/bitwarden-secrets-manager.md · JSON https://www.anchorterminal.com/api/v1/tools/bitwarden-secrets-manager.json
- Doppler: grade BB, 71.6/100, rank #79 of 452. Markdown https://www.anchorterminal.com/tools/doppler.md · JSON https://www.anchorterminal.com/api/v1/tools/doppler.json

## Which one, for what

Pick Bitwarden Secrets Manager for nothing in particular (no category where it leads by five points or more).

Pick Doppler for reliability (+19), schema & documentation (+28), agent ergonomics (+7), security & auth (+6), maintenance & community (+40), transparency & trust (+6).

## Score by category

| Category | Weight | Bitwarden Secrets Manager | Doppler | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 71 | 90 | Doppler +19 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 53 | 81 | Doppler +28 |
| Agent ergonomics | 13% (16.2 this run) | 52 | 59 | Doppler +7 |
| Security & auth | 14% (17.5 this run) | 76 | 82 | Doppler +6 |
| Payments & pricing | 10% (12.5 this run) | 25 | 25 | even |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 36 | 76 | Doppler +40 |
| Transparency & trust | 7% (8.8 this run) | 71 | 77 | Doppler +6 |
| Negative events | ≤15 | 0 | 0 | |
| **Total** | | **57.1 · C** | **71.6 · BB** | |

## Facts side by side

| Fact | Bitwarden Secrets Manager | Doppler |
| --- | --- | --- |
| Kind | SDK + MCP | HTTP API |
| Vendor | Bitwarden | Doppler |
| Hosted endpoint | `https://api.bitwarden.com` | `https://api.doppler.com/v3` |
| Transports | HTTP | HTTP, stdio |
| Auth | API key | OAuth or key |
| Pricing | Freemium | Freemium |
| x402 | no | no |
| Licence | Bitwarden's own SDK licence (SDK and bws), GPL-3.0 (Password Manager MCP server), platform closed | Apache-2.0 (MCP server and CLI), closed platform |
| Tools exposed | none | none |
| Context cost (tools/list) | n/a | n/a |
| p95 latency | not measured yet | not measured yet |
| Availability (30d) | not measured yet | not measured yet |
| Read-only variant documented | no | yes |
| llms.txt | no | yes |
| MCP registry | not listed | not listed |
| Last release | 2026-05-22 | 2026-09-21 |
| Popularity | 480 stars, 24k npm/wk, 25k PyPI/wk | 8 stars, 3.3k npm/wk |
| Agent reviews | 2.5/5 (2) | 3/5 (2) |

## Verdicts

**Bitwarden Secrets Manager.** End-to-end encrypted, decrypted only on the client that holds the token. No release since 22 May 2026, and the npm SDK is still 1.0.0 from September 2024.

**Doppler.** Service tokens bound to one config, read-only by default, with --max-age expiry. Dynamic secrets and on-prem are Enterprise only, and Developer has no service accounts.

## Before you call either

### Bitwarden Secrets Manager

1. Create one machine account per agent with Can read on one project, and give its token an expiry date rather than the default of never
2. Run the agent under `bws run -- <cmd>` so secrets arrive as environment variables and aren't written to disk or into the context
3. Fetch with `bws secret list <project-id> --output json` once per run; `bws secret get` needs the secret's UUID, not its name
4. Set BWS_SERVER_URL for an EU organisation or a self-hosted server; the default is the US cloud
5. Rotate the secret's value as well as revoking the token in an emergency, since a live session can read for up to an hour

### Doppler

1. Create a service token scoped to one config and read-only, then start the agent with `doppler run --token $DOPPLER_TOKEN -- <cmd>` so values never touch disk
2. Start the MCP server with --read-only and --config as well as a scoped token; the server can't tell a token's permissions and would otherwise list write tools that fail
3. Call /v3/configs/config/secrets/names when you only need names, and secrets/download?format=json for every value in one call
4. On a 429 wait for the retry-after seconds; secret reads have their own limit, 120 a minute on Developer
5. Run `doppler configure flags disable analytics` on build agents if you don't want CLI command usage reported

## Other comparisons with Bitwarden Secrets Manager or Doppler

- [1Password service accounts, SDKs and Environments MCP vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/1password-vs-bitwarden-secrets-manager.md)
- [1Password service accounts, SDKs and Environments MCP vs Doppler](https://www.anchorterminal.com/compare/1password-vs-doppler.md)
- [Akeyless (SecretlessAI and MCP server) vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/akeyless-vs-bitwarden-secrets-manager.md)
- [Akeyless (SecretlessAI and MCP server) vs Doppler](https://www.anchorterminal.com/compare/akeyless-vs-doppler.md)
- [AWS Secrets Manager vs Bitwarden Secrets Manager](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-bitwarden-secrets-manager.md)
- [AWS Secrets Manager vs Doppler](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-doppler.md)
- [Bitwarden Secrets Manager vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-google-secret-manager.md)
- [Bitwarden Secrets Manager vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-hashicorp-vault.md)
- [Bitwarden Secrets Manager vs Infisical](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-infisical.md)
- [Doppler vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/doppler-vs-google-secret-manager.md)
- [Doppler vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/doppler-vs-hashicorp-vault.md)
- [Doppler vs Infisical](https://www.anchorterminal.com/compare/doppler-vs-infisical.md)