The secret manager
built for the AI era.

Every secret expires. By design.

$ sirr set OPENAI_API_KEY=sk-proj-... --org acme --ttl 1h

✓ Secret stored. Expires in 1 hour.

$ sirr run --org acme -- pnpm start

> Injected 1 secret into environment.

> Server listening on port 3000...

$ sirr get OPENAI_API_KEY --org acme

✗ Secret not found — already burned.

Built for every team

Secure your infrastructure with a zero-trust architecture designed for modern workflows.

Zero-trust architecture with full audit trails. Reduce blast radius and satisfy SOC 2, ISO 27001, and GDPR requirements.

Single Rust binary, zero dependencies, self-hosted governance. Deploy tokens that self-destruct after your pipeline runs.

MCP Server for Claude, official SDKs for Node.js, Python, and .NET. Give AI agents one-read credentials that burn on use.