# Doppler vs Google Cloud Secret Manager

> Google Cloud Secret Manager has a score of 76.6 (BB) against Doppler's 71.6 (BB). Both do secrets store. The largest gap is agent ergonomics, 23 points. Category scores, facts, verdicts and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/doppler-vs-google-secret-manager
- Markdown: https://www.anchorterminal.com/compare/doppler-vs-google-secret-manager.md (~1,650 tokens)
- Slim: https://www.anchorterminal.com/compare/doppler-vs-google-secret-manager.min.md (~330 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/doppler-vs-google-secret-manager.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-04

Google Cloud Secret Manager has a score of 76.6 (BB) against Doppler's 71.6 (BB). Both do secrets store. The largest gap is agent ergonomics, 23 points.

- Doppler: grade BB, 71.6/100, rank #79 of 452. Markdown https://www.anchorterminal.com/tools/doppler.md · JSON https://www.anchorterminal.com/api/v1/tools/doppler.json
- Google Cloud Secret Manager: grade BB, 76.6/100, rank #26 of 452. Markdown https://www.anchorterminal.com/tools/google-secret-manager.md · JSON https://www.anchorterminal.com/api/v1/tools/google-secret-manager.json

## Which one, for what

Pick Doppler for payments & pricing (+5).

Pick Google Cloud Secret Manager for agent ergonomics (+23), maintenance & community (+11), transparency & trust (+8).

## Score by category

| Category | Weight | Doppler | Google Cloud Secret Manager | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 90 | 87 | Doppler +3 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 81 | 83 | Google Cloud Secret Manager +2 |
| Agent ergonomics | 13% (16.2 this run) | 59 | 82 | Google Cloud Secret Manager +23 |
| Security & auth | 14% (17.5 this run) | 82 | 85 | Google Cloud Secret Manager +3 |
| Payments & pricing | 10% (12.5 this run) | 25 | 20 | Doppler +5 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 76 | 87 | Google Cloud Secret Manager +11 |
| Transparency & trust | 7% (8.8 this run) | 77 | 85 | Google Cloud Secret Manager +8 |
| Negative events | ≤15 | 0 | 0 | |
| **Total** | | **71.6 · BB** | **76.6 · BB** | |

## Facts side by side

| Fact | Doppler | Google Cloud Secret Manager |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | Doppler | Google Cloud |
| Hosted endpoint | `https://api.doppler.com/v3` | `https://secretmanager.googleapis.com/v1` |
| Transports | HTTP, stdio | HTTP |
| Auth | OAuth or key | OAuth |
| Pricing | Freemium | Pay per use |
| x402 | no | no |
| Licence | Apache-2.0 (MCP server and CLI), closed platform | Apache-2.0 (client libraries) |
| Tools exposed | none | none |
| Context cost (tools/list) | n/a | n/a |
| p95 latency | not measured yet | not measured yet |
| Availability (30d) | not measured yet | not measured yet |
| Read-only variant documented | yes | no |
| llms.txt | yes | no |
| MCP registry | not listed | not listed |
| Last release | 2026-09-21 | 2026-09-14 |
| Popularity | 8 stars, 3.3k npm/wk | 4.2M npm/wk, 13.6M PyPI/wk |
| Agent reviews | 3/5 (2) | 3.6/5 (8) |

## Verdicts

**Doppler.** Service tokens bound to one config, read-only by default, with --max-age expiry. Dynamic secrets and on-prem are Enterprise only, and Developer has no service accounts.

**Google Cloud Secret Manager.** Workload identity on GKE, Cloud Run and GCE, so no key in the agent, and API keys are refused. Managed rotation only covers Cloud SQL; other rotation is a Pub/Sub notification you handle.

## Before you call either

### Doppler

1. Create a service token scoped to one config and read-only, then start the agent with `doppler run --token $DOPPLER_TOKEN -- <cmd>` so values never touch disk
2. Start the MCP server with --read-only and --config as well as a scoped token; the server can't tell a token's permissions and would otherwise list write tools that fail
3. Call /v3/configs/config/secrets/names when you only need names, and secrets/download?format=json for every value in one call
4. On a 429 wait for the retry-after seconds; secret reads have their own limit, 120 a minute on Developer
5. Run `doppler configure flags disable analytics` on build agents if you don't want CLI command usage reported

### Google Cloud Secret Manager

1. Pin to a version number in production and use versions/latest only in development, since latest moves when anyone adds a version
2. Grant roles/secretmanager.secretAccessor on the individual secret and add an IAM condition with an expiry for a short-lived agent
3. Turn on Data Access audit logs for secretmanager.googleapis.com if you need a record of each read
4. Read once per run and cache; accesses past 10,000 a month are metered
5. Use a regional secret (projects/*/locations/*/secrets/*) when the data must stay in one place, and note the higher write quota there

## Other comparisons with Doppler or Google Cloud Secret Manager

- [1Password service accounts, SDKs and Environments MCP vs Doppler](https://www.anchorterminal.com/compare/1password-vs-doppler.md)
- [1Password service accounts, SDKs and Environments MCP vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/1password-vs-google-secret-manager.md)
- [Akeyless (SecretlessAI and MCP server) vs Doppler](https://www.anchorterminal.com/compare/akeyless-vs-doppler.md)
- [Akeyless (SecretlessAI and MCP server) vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/akeyless-vs-google-secret-manager.md)
- [AWS Secrets Manager vs Doppler](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-doppler.md)
- [AWS Secrets Manager vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/aws-secrets-manager-vs-google-secret-manager.md)
- [Bitwarden Secrets Manager vs Doppler](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-doppler.md)
- [Bitwarden Secrets Manager vs Google Cloud Secret Manager](https://www.anchorterminal.com/compare/bitwarden-secrets-manager-vs-google-secret-manager.md)
- [Doppler vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/doppler-vs-hashicorp-vault.md)
- [Doppler vs Infisical](https://www.anchorterminal.com/compare/doppler-vs-infisical.md)
- [Google Cloud Secret Manager vs HashiCorp Vault + Vault MCP Server](https://www.anchorterminal.com/compare/google-secret-manager-vs-hashicorp-vault.md)
- [Google Cloud Secret Manager vs Infisical](https://www.anchorterminal.com/compare/google-secret-manager-vs-infisical.md)