Open Source · MIT License · Free Forever

Secrets management for
developers and AI agents

Zero-knowledge E2E encryption. CLI-native. MCP server for AI agents with credential brokering. Self-hostable.

npm install -g pabox
E2E

Zero-Knowledge Encryption

AES-256-GCM + Argon2id + X25519. Server never sees your plaintext secrets.

>_

CLI Native

passbox get, passbox set, passbox run. Inject secrets into any process.

MCP

AI Agent Native

MCP server with credential brokering. AI agents use secrets without seeing them.

.env

.env Integration

Import and export .env files. Replace scattered dotenv files with a vault.

SDK

TypeScript SDK

@pabox/sdk for Node.js, Deno, Bun. Drop-in for your apps and CI/CD.

OSS

Self-Hostable

Docker Compose one-liner. MIT licensed. Your infrastructure, your data.

Terminal
$ passbox login
Authenticated as dev@example.com
$ passbox set DATABASE_URL "postgres://..."
Secret set in vault "default" (v1)
$ passbox run -- node server.js
Injected 12 secrets into process
Server running on :3000

Simple pricing

Start free. Scale as you grow.

Free

$0

3 vaults, 50 secrets each

Get Started

Pro

$12/mo

Unlimited everything

Start Trial

Team

$28/mo

SSO + Advanced security

See Details
Coming Soon

PassBox Cloud

Managed hosting with zero setup. All the power of self-hosted PassBox, without the infrastructure. Join the waitlist for early access.

MIT

Open Source License

E2E

Zero-Knowledge

5

npm Packages

41

Tests Passing