Toolkit for collaborative, secure management of secrets across applications, environments, and teams.

v1.0.0-beta.2 2025-09-05 03:55 UTC

This package is auto-updated.

Last update: 2025-09-05 21:32:01 UTC


README

Latest Version on Packagist Software License Tests

Keep is your toolkit for secure, collaborative management of application secrets across environments and teams.

Key Features

  • 🔐 Multi-Vault Support - AWS SSM Parameter Store and AWS Secrets Manager
  • 🖥️ Web UI - Modern browser-based interface for visual secret management
  • 🚀 Interactive Shell - Context-aware shell with tab completion for rapid secret management
  • 🌍 Environment Isolation - Separate secrets by stage (local, staging, production)
  • 📝 Template Management - Create, validate, and process templates with placeholders
  • 🔄 Bulk Operations - Import, export, copy, and diff secrets across environments
  • 🤝 Team Collaboration - Share secret management with proper access controls
  • ⚙️ CI/CD Ready - Export secrets for deployment pipelines

Quick Example

# Install
composer require stechstudio/keep

# Configure
./vendor/bin/keep configure

# Interactive shell - the fastest way to work
./vendor/bin/keep shell

# Set a secret
./vendor/bin/keep set DB_PASSWORD "secret" --stage=production

# Export to .env
./vendor/bin/keep export --stage=production --file=.env

# Create template from existing secrets
./vendor/bin/keep template:add .env.template --stage=production

# Use template with placeholders
./vendor/bin/keep export --stage=production --template=.env.template --file=.env

Interactive Shell

The Keep shell provides a context-aware environment for managing secrets:

$ ./vendor/bin/keep shell
Welcome to Keep Shell v1.0.0

ssm:local> use production
Switched to: ssm:production

ssm:production> set API_KEY
Value: ********

ssm:production> copy API_KEY staging
✓ Copied API_KEY to staging

ssm:production> diff staging production
│ Key     │ staging │ production │ Status │
├─────────┼─────────┼────────────┼────────┤
│ API_KEY │ abc...  │ abc...     │ ✓      │

Web UI

Keep includes a modern web interface for visual secret management:

# Start the web server
./vendor/bin/keep server

# Custom port (default: 4000)
./vendor/bin/keep server --port=8080

# Don't auto-open browser
./vendor/bin/keep server --no-browser

The Web UI provides:

  • Visual secret management with search and filtering
  • Diff matrix view comparing secrets across stages/vaults
  • Export functionality with live preview
  • Import wizard for .env files with conflict resolution
  • Settings management for vaults and stages
  • Real-time validation and error handling

Documentation

📚 Full documentation available at https://stechstudio.github.io/keep/

License

The MIT License (MIT). Please see License File for more information.