Keypaste
Local, KeePass-compatible password and secrets manager built for agent workflows: logins and project environment variables live in one KDBX file, and when an agent asks for a credential via CLI or MCP you see who is asking and why, then approve or deny that single field.
Updated
✨ Try AgentScout's free AI image generator →Good for: coding in the terminal, automating workflows, connecting tools with MCP
Use cases
Boost Keypaste with our $29 Fast-Track + 7-Day Launch Boost, pin it to the top of security & governance for 30 days + permanent /best/ & /compare/ placement + dual X spotlight (@clampdown19 & @AgentScoutHQ) for $49, or book the exclusive $99/wk sitewide & newsletter slot.
About Keypaste
Keypaste is listed in our security & governance category and is aimed at builders. Local, KeePass-compatible password and secrets manager built for agent workflows: logins and project environment variables live in one KDBX file, and when an agent asks for a credential via CLI or MCP you see who is asking and why, then approve or deny that single field. Pricing, as the maker states it: Open source. Maturity: Active. We last checked the official link on 2026-10-28.
Keypaste at a glance
- Category: Security & governance
- Built for: Developers and teams building with AI agents
- Pricing: Open source (as the maker states it)
- GitHub: notinferred/keypaste · 597 stars (as of Oct 28, 2026)
- Official site: keypaste.com
- Listed on AgentScout: Oct 28, 2026
Keypaste FAQ
What is Keypaste?
Local, KeePass-compatible password and secrets manager built for agent workflows: logins and project environment variables live in one KDBX file, and when an agent asks for a credential via CLI or MCP you see who is asking and why, then approve or deny that single field.
How much does Keypaste cost?
Keypaste's pricing, as the maker states it: Open source. Open-source tools are free to use, though you may still pay for model API usage or a hosted plan. Check the official site for current plans.
Where can I find Keypaste's source code?
On GitHub at notinferred/keypaste, which had 597 stars as of Oct 28, 2026.
What are alternatives to Keypaste?
Similar tools include Infisical, Phase, ThinkWatch Lite, Aletheore, 1Password for Agents and Jentic One.
Facts from our link-checked listing, the GitHub repository and the official site. See something wrong? Suggest an edit.
Keypaste ratings and reviews
Be the first to rate Keypaste: tap 1 to 5 stars below. A written review is optional.
Keypaste alternatives
Other security & governance tools in our directory. See all security & governance tools →
Infisical
Open-source platform for managing secrets, certificates and privileged access, including scoped credentials for AI agents.
Phase
An open-source secrets manager that syncs API keys and environment variables to apps, CI and agents with end-to-end encryption and access control. Free tier, Pro from $10 per user a month, or self-host.
ThinkWatch Lite
A local gateway that sits between your coding agents and model providers, letting you switch upstreams, redact secrets before they leave your machine, block dangerous tool calls and see the cost of each request.
Aletheore
Aletheore audits code repositories and backs every finding with evidence. Its deterministic scanner looks for leaked secrets, vulnerable dependencies and dead code, it can watch live endpoints and draw architecture maps, and it reviews pull requests automatically through a GitHub Action. A built-in MCP server lets coding agents run the same audits.
1Password for Agents
1Password for Agents lets personal AI agents sign in to your accounts without ever seeing your passwords or one-time codes. When a supported agent reaches a sign-in page, it asks for a credential from your vault; you approve the request, and 1Password fills it straight into the site, so the secret never enters the model or its memory. You can see and manage which agents have access to what. It launched with integrations for agents such as Claude Duet, ChatGPT Work and dots, Meta's Muse and Grok Bot, and needs a 1Password plan.
Jentic One
Self-hosted broker that lets agents call real APIs without holding keys: it checks permissions, injects credentials at call time, and logs every execution.
Related lists
🏆 See also: Strix alternatives · All best-of lists
🧭 Task guides: Local and self-hosted tools for terminal coding · AI workflow automation tools
Badge for makers
Built Keypaste? Add this badge to your README or site. It links back to this page. About badges
