Every server.
One wallet.
SSH keys, users, IPs, DNS and the details you always forget — stored once, encrypted at rest, and handed to your team and your agents through one clean API.
Everything a server address book should be
Built for the way teams — and increasingly, their agents — actually use credentials.
Audited reveals
Secrets never sit in list views. Reveal on demand or copy to clipboard — and every reveal is logged with actor and timestamp.
Envelope encryption
AES-256-GCM with a unique data key per secret, wrapped by a master key that lives outside the database.
Agent-friendly API
Clean REST with bearer tokens, machine-readable errors, an OpenAPI document, and a /me endpoint for validation.
Built for teams
Roles, scoped API keys, and full server context — environment, tags, OS and notes — right next to the credentials.
Accountability first
The audit log is a first-class surface, not a debug tool. Know exactly who touched what, and when.
Self-host or SaaS
One app container, one Postgres. Run it on a spare box today, sell access to it tomorrow.
Your servers are holding their keys hostage.
Put them somewhere sensible in about five minutes — encrypted, audited, and API-ready.