envvault
Scoped-access secret management for agents, scripts, and small teams.
EnvVault is a small secrets system for the work that falls between a password manager and a full platform team: API keys, service credentials, app-specific env vars, and short-lived access for agents or scripts.
It has a Flask web UI, encrypted storage, user approval, scoped API keys, session tokens, and a generated API reference that makes it easier for an assistant to request the narrow credential it needs instead of getting handed a raw .env file.
The project also doubles as internal infrastructure for my own systems, especially when GitHub, Fly.io, or agent workflows need credentials without baking them into the local environment.