I Built Authsia Because AI Agents Shouldn't Need to See Your Secrets

Short summary

Authsia is a macOS secret vault that lets AI agents and developers use secrets—API keys, SSH keys, tokens—without exposing them unnecessarily. It replaces plaintext .env values with authsia:// references, masks secrets from command output, and uses just-in-time approvals so agents can run commands with scoped access. The tool solves a real problem: agents need secrets, but shouldn't get broad read permissions.

• •Authsia provides scoped secret access for AI agents without granting broad read permissions
• •Secrets stored in a vault and referenced via authsia:// URIs instead of plaintext .env files
• •Command output masking and JIT approvals create safety boundaries for automated workflows

Generated with AI, which can make mistakes.