square/keywhiz

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

2623 stars · 213 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Keywhiz is a Java-based system for centrally storing, managing, and distributing secrets such as TLS keys, API tokens, and database credentials. Clients retrieve secrets over mutually authenticated TLS and expose them as files in tmpfs, while administrators manage secrets via a CLI and automation APIs.

Use cases

• distribute api tokens and database credentials to services securely
• manage tls certificates and keys across a server fleet
• replace secrets in config files with a central secret store
• deliver secrets as files to applications via tmpfs
• automate secret retrieval in a service-oriented architecture
• self-host a secrets management server with mTLS client auth

When to choose

• you need secrets delivered as files on disk/tmpfs to existing applications
• you want mTLS-based client authentication for secret distribution
• you are already invested in the Java/JVM ecosystem and MySQL
• you need a self-hosted alternative compatible with SOA workflows

When to avoid

• starting a new project - it is deprecated since September 2023
• you want an actively maintained tool - use HashiCorp Vault instead
• you need cloud-native secret management or dynamic secrets
• you cannot operate Java 11 and MySQL infrastructure

Facets

service · maturity abandoned

secrets-management auth security api-framework cli security backend self-hosted jvm self-hosted cli secrets-distribution mtls deprecated dropwizard enterprise devops linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="square/keywhiz")