SecretSpec
SecretSpec is Replace shared .env files with a manifest of what your application expects. Keep values out of git and resolve them from any provider.. It is ranked #1175 on the Dev Radar, in Security, first seen 14 days ago and shared in 5 posts (7.9k views).
A declarative interface for every secret provider. | SecretSpec Skip to content SecretSpec Search Ctrl K Cancel ★ Docs Blog A declarative interface for every secret provider. Latest from the blog Sep 2, 2026 Claude Code Stores OAuth Tokens in Plaintext Read post → A declarative interface for every secret provider. Declare secrets without hard-wiring your app to a secrets provider or leaking them through environment variables . One contract. Development, CI, and production. Providers (34) macOS Keychain KeePass KDBX 1Password Keeper Secrets Manager Doppler LastPass Dashlane Bitwarden Password Manager Vault OpenBao AWS Secrets Manager AWS…
What people said about SecretSpec on X
Here's an update on local-first cross-platform secure vault, FactorSeal. We're using IPC/keyring from https://secretspec.dev to open a dialog to unlock the vault and grand access to specific secrets for a project for a period of time.
— @domenkozar, 11 days ago · 24 likes · see the post
Still waiting for models to pick up https://secretspec.dev/blog/where-env-went-wrong/ and stop recommending bad practices
— @domenkozar, 4 days ago · 19 likes · see the post
Substantial change to https://secretspec.dev, converting internal secret type to be bytes instead of utf-8. Changes all APIs across the board, but we better make it now. https://github.com/cachix/secretspec/pull/431
— @domenkozar, 13 days ago · 24 likes · see the post
Alternatives to SecretSpec
- Cloudflare Blog — Use production traffic and security signals to prioritize findings, prepare edge mitigations when safe, and propose…
- security-audit-skill — A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings -…
- TheDAO Security Fund — Ecosystem-funded Ethereum security initiatives. Browse open initiatives, donate by wallet or from an exchange, back…
- user-scanner — 🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a…
- NVIDIA Developer — Accelerates leading PQC algorithms and advances data security against quantum computer threats.
- aliens_eye — Hunt down 840+ social media accounts using AI. Contribute to arxhr007/Aliens_eye development by creating an account on…
SecretSpec in numbers
- Rank on the Dev Radar: #1175 of 1353
- Shared in 5 posts by 1 account: @domenkozar
- 7.9k views on those posts
- First seen 14 days ago, last shared 4 days ago
- Pricing seen by Jev: not stated
- Market: Security
FAQ
What is SecretSpec?
Replace shared .env files with a manifest of what your application expects. Keep values out of git and resolve them from any provider. It was first shared on X 14 days ago and is ranked #1175 on the Dev Radar.
Is SecretSpec free?
Pricing is not stated on the page we read.
Who shared SecretSpec?
1 account on X, including @domenkozar, in 5 posts totalling 7.9k views.
Every post is read and classified by Jev (TypeSafe): what it is, which market it belongs to, and whether the link is a real tool. 12.2k posts from 4.7k X accounts over the last 21 days, 1.4k tools, 12 markets. Collected every 5 minutes, fully re-ranked every hour — last update 2026-09-19 18:06 UTC. Full method.