Automated Secret Rotation

via “credential-rotation-and-lifecycle-management”

Hey HN! Today we're launching Agent Vault - an open source HTTP credential proxy and vault for AI agents. Repo is at https://github.com/Infisical/agent-vault, and there's an in-depth description at https://infisical.com/blog/agent-vault-the-open-sour

Unique: Implements agent-aware credential rotation that can notify agents of credential changes and invalidate cached values, rather than just rotating credentials in the backend without agent coordination

vs others: More practical than manual rotation (which is error-prone and doesn't scale) and more agent-focused than backend-native rotation that doesn't account for agent caching or notification

via “secret rotation and versioning with zero-downtime updates”

Enable secure and efficient management of encrypted data vaults through a standardized protocol interface. Facilitate seamless integration of encrypted storage and retrieval operations within your applications. Enhance data security and accessibility by leveraging this server's capabilities.

Unique: Implements zero-downtime secret rotation as an MCP operation, allowing clients to query available versions and migrate gradually without external orchestration

vs others: More integrated than manual rotation scripts but less sophisticated than dedicated secret rotation platforms with automatic client updates

KeyReaper is an MCP server that gives Claude agents full control over API keys and secrets. Connect once and your agent can retrieve, store, rotate, and live-test credentials across 40+ providers — all encrypted at rest, never logged. Supported providers: OpenAI, Anthropic, AWS, GitHub, GitLab, Str

Unique: KeyReaper's ability to live-test credentials before and after rotation minimizes the risk of downtime, a feature not typically found in similar tools.

vs others: Offers real-time testing of secrets post-rotation, reducing the likelihood of service interruptions.

via “automated-credential-rotation-at-scale”