# tellerops/teller

Cloud native secrets management for developers - never leave your command line for secrets.

Repository: https://github.com/tellerops/teller
Canonical: https://ross.abutalabs.com/products/teller
Homepage: https://github.com/tellerops/teller
Language: Rust
License: Apache-2.0
License Family: permissive
Topics: secrets, secret-management, vault, hashicorp, aws, rust, rust-lang
Last push: 2026-01-27T18:13:10+00:00

## Health v2 (maintenance only)
Score: 52/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 64, release rhythm 8, longevity 100
- inputs: {"age_days": 1988, "days_push": 218, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3227, forks 201 (observed 2026-08-28T04:07:49.998858+00:00)

## What it is
Teller is an open-source, developer-first CLI secret manager written in Rust that fetches secrets from multiple providers (HashiCorp Vault, AWS Secrets Manager, Google Secret Manager, dotenv, and more) without leaving the terminal. It centralizes secret workflows via a YAML configuration, supports running subprocesses with injected secrets, and helps scan for and fight secret sprawl.

## Use cases
- fetch secrets from vault and cloud providers from the command line
- inject secrets into subprocesses without exporting them in shell history
- replace scattered .env files and tokens in shell rc files
- manage secrets across multiple providers with one config file
- scan projects for leaked secrets and secret sprawl
- run local development with secrets pulled from AWS Secrets Manager
- share team secret workflows as a versioned teller.yml

## When to choose
- you use multiple secret backends (Vault, AWS, GCP, dotenv) and want one unified CLI
- you want to keep secrets out of shell history, rc files, and .env files
- you prefer a lightweight, open-source, terminal-based secret workflow
- you need to run processes with secrets injected as environment variables

## When to avoid
- you need a full secrets server or storage backend - Teller only reads from existing providers
- your team requires a GUI or web dashboard for secret management
- you need enterprise features like dynamic secrets leasing or rotation built in

## Facets
- artifact type: cli-tool
- maturity: active
- function: secrets-management, cli, configuration-management, security, developer-tools
- domain: developer-tools, security, cloud-computing
- platform: cli, cross-platform, windows, rust
- tags: secret-management, vault, env-vars, hashicorp-vault, aws-secrets-manager, dotenv, devops, command-line, macos, linux

## Member repositories
- tellerops/teller (main) score 52

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:49.998858+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:44:16.050629+00:00, confidence not recorded.
  - readme: https://github.com/tellerops/teller (fetched 2026-08-28T04:07:49.998858+00:00, sha b391045b2c6d)
  - homepage: https://github.com/tellerops/teller (fetched 2026-08-29T09:37:39.714777+00:00, sha 80b831147beb)
  - registry_crates: https://crates.io/api/v1/crates/teller (fetched 2026-08-29T09:37:39.724130+00:00, sha 23962cd7b4e8)
- Data as of 2026-08-30T08:39:29.467469+00:00.