Doppler

Platform

Hosted secrets manager that syncs env vars to your apps, CI and cloud

Price: Free tier, then paid
Access: Service token

About

Stores secrets per project and environment, injects them into processes with its CLI and syncs them to cloud platforms and CI/CD. Free for up to 3 users, then billed per seat; machine identities are free, and all data is hosted on GCP in the US.

What you can do with it

Inject secrets into local and production processes with doppler run
Sync secrets to AWS Secrets Manager, Vercel, GitHub Actions and Kubernetes
Rotate database and cloud credentials on a schedule

Get started

Install the Doppler CLI and run doppler login
Run doppler setup in your project to pick a project and config

Example

# Run your app with its secrets injected as environment variables
doppler run -- npm start

# Or download a config's secrets over the API with a service token
curl "https://api.doppler.com/v3/configs/config/secrets/download?format=json" \
  -H "Authorization: Bearer $DOPPLER_TOKEN"

Details

Hosting: Hosted service
Available in: Worldwide
Official SDKs: JavaScript/TypeScript, Python
MCP server: Local
Works with: AWS, Vercel, GitHub