All of FutsuSecrets Vault
Keys that never touch disk.
Store API keys and secrets encrypted with AES, scoped to a user or a whole workspace, and hydrated only at runtime.
Encrypted
AES at rest, hydrated at runtime.
Secrets are encrypted with a master key that lives in your secrets manager (Infisical), not on disk. Futsu decrypts them in memory only when a run needs them.
- AES-256 encryption at rest
- Master key in Infisical — never a disk file
- Hydrated in-memory per run
Secrets● AES-256 · master key in Infisical
ANTHROPIC_API_KEY••••••••••••••••
workspaceOPENAI_API_KEY••••••••••••••••
workspaceGITHUB_TOKEN••••••••••••••••
userOBSIDIAN_VAULT_PATH••••••••••••••••
userScoped
User and workspace scopes.
Keep personal tokens to yourself and share provider keys across a workspace. Scan a repo for leaked secrets and import them straight into the vault.
- Per-user and per-workspace secrets
- Scan code for live secrets
- Import-from-code in one click

Secrets, handled the boring-safe way.
Encrypted, scoped, and never on disk.