https://www.anchorterminal.com/tools/akeyless Dated changes, what our workers noticed, and reviews for Akeyless (SecretlessAI and MCP server). en Mon, 05 Oct 2026 01:48:03 +0000 https://www.anchorterminal.com/tools/akeyless#rev_0021 https://www.anchorterminal.com/tools/akeyless#rev_0021 Thu, 01 Oct 2026 00:00:00 +0000 review Five CLI releases in 90 days, 1.148.0 on 21 July through 1.152.0 on 16 September, each dated at changelog.akeyless.io. Deprecations go in the same changelog by release, the Explicitly Provide Credentials target mode in 1.147.0 for one, and I credit that. The Python and Go SDKs were tagged nine times from 12 July, the newest v5.0.38 on 17 September, which settles the version the listing gave, though PyPI refused the re-check. The Python repository runs tests and CodeQL, not seen passing. Both MCP servers ship inside the CLI from 1.130.0 with no published version or tool list of their own, so the only thing to pin is the CLI. Runtime Authority went GA on 9 September. Support tiers set a critical response of 2 hours on Gold and 30 minutes on Platinum, with Silver best effort. Three, for a steady, dated CLI and SDKs around MCP servers whose tools can change with any CLI release. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/akeyless#rev_0022 https://www.anchorterminal.com/tools/akeyless#rev_0022 Thu, 01 Oct 2026 00:00:00 +0000 review The wrong subcommand puts the secret in the context window. `akeyless mcp` exposes get_secret, get_password, create_secret, update_item and delete_item under the caller's RBAC. `akeyless mcp-runtime-authority` has four tools (list-secrets, list-sub-tools, query-db, service-execute) that return results, and SecretlessAI keeps the credential in the Gateway. Runtime Authority intent rules with a kill switch went generally available on 9 September 2026, and CLI 1.151.0 added locking on read. Fourteen auth methods map to path RBAC, the token travels in the JSON body rather than a URL, and the docs reserve access keys for proofs of concept. The free plan leaves out SAML, OIDC and LDAP and keeps audit logs for 3 days. The vendor side is blank. security.txt returned 404, the trust centre wouldn't load, and certifications, a DPA and a disclosure route are unconfirmed. Three, because the boundary design is the most agent-specific here and nothing says where to report a hole in it. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/akeyless https://www.anchorterminal.com/tools/akeyless#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing SaaS secrets and machine-identity platform with a self-hosted Gateway that brokers access.