tellerops/teller

Health v2 · maintenance only

Adoption not part of the score

3227 stars · 201 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Teller is an open-source, developer-first CLI secret manager written in Rust that fetches secrets from multiple providers (HashiCorp Vault, AWS Secrets Manager, Google Secret Manager, dotenv, and more) without leaving the terminal. It centralizes secret workflows via a YAML configuration, supports running subprocesses with injected secrets, and helps scan for and fight secret sprawl.

Use cases

• fetch secrets from vault and cloud providers from the command line
• inject secrets into subprocesses without exporting them in shell history
• replace scattered .env files and tokens in shell rc files
• manage secrets across multiple providers with one config file
• scan projects for leaked secrets and secret sprawl
• run local development with secrets pulled from AWS Secrets Manager
• share team secret workflows as a versioned teller.yml

When to choose

• you use multiple secret backends (Vault, AWS, GCP, dotenv) and want one unified CLI
• you want to keep secrets out of shell history, rc files, and .env files
• you prefer a lightweight, open-source, terminal-based secret workflow
• you need to run processes with secrets injected as environment variables

When to avoid

• you need a full secrets server or storage backend - Teller only reads from existing providers
• your team requires a GUI or web dashboard for secret management
• you need enterprise features like dynamic secrets leasing or rotation built in

Facets

cli-tool · maturity active

secrets-management cli configuration-management security developer-tools developer-tools security cloud-computing cli cross-platform windows rust secret-management vault env-vars hashicorp-vault aws-secrets-manager dotenv devops command-line macos linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="tellerops/teller")