How do I install secretctl?

Its own README gives this command: secretctl init. Run it where your MCP client can launch the server, and check the README for any settings it asks for.

What does secretctl connect to, and what does it need?

It reaches openai, secretctl and temp. The credentials we found in its source are DB_PASSWORD, OPENAI_API_KEY, SECRETCTL_PASSWORD and TEMP_TOKEN.

Is secretctl official and is it maintained?

We found nothing naming it as a vendor’s official server. Its repository has 11 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-01-22.

What licence does secretctl use?

The repository declares the Apache-2.0 licence.

InfratoApp / Resources / MCP servers / secretctl

secretctl

secretctl is an MCP server, listed under model apis. It reaches openai, secretctl and temp. It needs DB_PASSWORD, OPENAI_API_KEY, SECRETCTL_PASSWORD and TEMP_TOKEN to authenticate. Its repository has 11 GitHub stars and is licensed under Apache-2.0; we last read it on 2026-10-22.

Manages secrets locally first, offering a single-binary CLI and desktop app with MCP integration, ensuring secrets are never exposed to AI agents.

Install

Read from secretctl’s own README, close to verbatim -- not written by us, and not guessed.

secretctl init

View in secretctl’s own README ↗

What it reaches, and what it needs

Reaches

openai, secretctl, temp

Credential

DB_PASSWORD, OPENAI_API_KEY, SECRETCTL_PASSWORD, TEMP_TOKEN

Maintenance

Stars

State

listed

Licence

Apache-2.0

From the repository

The simplest AI-ready secrets manager. Local-first, single-binary CLI & Desktop app with MCP integration. Never expose secrets to AI agents.

View on GitHub ↗2026-10-22

secretctl compared with similar servers

secretctl compared with the closest alternatives, by services reached, credentials, stars, last update and licence
Server	Reaches	Needs	Stars	Last update	Licence
secretctl (this page)	openai, secretctl, temp	DB_PASSWORD, OPENAI_API_KEY, SECRETCTL_PASSWORD, TEMP_TOKEN	11	2026-01-22	Apache-2.0
paperbanana	atlascloud, google, openai(1 shared)	ATLASCLOUD_API_KEY, GOOGLE_API_KEY, OPENAI_API_KEY	2,412	2026-09-17	MIT
ms-365-mcp-server	ms365, openai(1 shared)	MS365_MCP_ATTACHMENT_URL_KEY, MS365_MCP_CLIENT_SECRET, MS365_MCP_OAUTH_TOKEN, OPENAI_API_KEY	1,068	2026-10-23	MIT
just-prompt	anthropic, deepseek, gemini, groq, openai(1 shared)	ANTHROPIC_API_KEY, DEEPSEEK_API_KEY, GEMINI_API_KEY, GROQ_API_KEY, OPENAI_API_KEY	739	2025-08-10	—
flama	anthropic, openai(1 shared)	None listed	304	2026-10-13	Apache-2.0
mcp-ragdocs	openai, qdrant(1 shared)	OPENAI_API_KEY, QDRANT_API_KEY	265	2025-07-18	MIT

Ranked by services in common with secretctl, then by stars. Figures are from each repository when we last read it.

Common questions about secretctl

What does secretctl do?: Manages secrets locally first, offering a single-binary CLI and desktop app with MCP integration, ensuring secrets are never exposed to AI agents.
How do I install secretctl?: Its own README gives this command: secretctl init. Run it where your MCP client can launch the server, and check the README for any settings it asks for.
What does secretctl connect to, and what does it need?: It reaches openai, secretctl and temp. The credentials we found in its source are DB_PASSWORD, OPENAI_API_KEY, SECRETCTL_PASSWORD and TEMP_TOKEN.
Is secretctl official and is it maintained?: We found nothing naming it as a vendor’s official server. Its repository has 11 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-01-22.
What licence does secretctl use?: The repository declares the Apache-2.0 licence.

More MCP servers for model apis

wigolo5,498 stars
KiCAD-MCP-Server2,905 stars
modelcontextprotocol2,589 stars
paperbanana2,412 stars
gemini-mcp-tool2,294 stars
telegram-mcp1,879 stars

All model apis entries →