Credential broker and vault for AI agents.
An open-source credential broker that sits between your agents and the services they call. Instead of sharing credentials with every agent, log in once via OAuth2 or API keys. Authsome stores credentials securely and injects them via an HTTP proxy. One place to manage access, rotate keys, and see what every agent is doing.
Agents run beyond interactive sessions. They live in CI, over SSH, in cron jobs, in background workers, and in parallel pipelines. They need API access that survives without a human in the loop.
Hardcoded environment tokens leak or go stale, and building auth flow logic, token storage, refresh handling, and per-provider config into every project rebuilds the same plumbing every time.
Authsome is the local credential layer agents call at runtime.
- 01No credential sprawl.One encrypted store. Every provider, every agent, one place.
- 02No SaaS, no privacy trade-off.Credentials never leave your machine. Eliminates credential exfiltration risks as agents never see them.
- 03No browser required at runtime.Setup uses browser PKCE, device code, or a browser bridge for secure API key entry. After that, agents run headlessly.
Five layers, one orchestrator.
Each layer has a single bounded responsibility. Layers do not reach sideways. Explicit orchestrators compose them, so every layer is independently testable and swappable.
Built for the way agents actually run.
Encrypted vault
Per-profile SQLite store under ~/.authsome/. Master key file at mode 0600, derived from your passphrase.
Automatic refresh
OAuth2 tokens renew before expiry. Stale credentials are refreshed on read.
Profiles
Independent namespaces: default, work, per-agent. Connections do not cross profiles.
Multiple connections
Personal and team credentials per provider, side by side via --connection.
Headless flows
Device-code grant for SSH and CI. Browser-bridge form for raw API keys.
Custom providers
Drop a JSON file in ~/.authsome/providers/ to override or add a service.
Audit log
Every credential read, refresh, and policy decision appended to ~/.authsome/audit.log.
Agent skill
/anthropic-skills:authsome teaches skill-aware agents the list → login → run flow without you in the loop.
44 out of the box.
Anything else via custom providers. A single JSON file in ~/.authsome/providers/.
Where authsome fits.
| Authsome | .env files | Doppler / Infisical | 1Password CLI | |
|---|---|---|---|---|
| Local-only by design | ● | ● | ○ | ● |
| Built for agents | ● | ○ | ○ | ○ |
| Open source | ● | ● | partial | ○ |
| Free for individuals | ● | ● | limited | limited |
| Automatic OAuth2 refresh | ● | ○ | ○ | ○ |
| Device code flow | ● | ○ | ○ | ○ |
| Multi-account per provider | ● | ○ | ● | ● |
| Header injection at proxy | ● | ○ | ○ | ○ |
| No SaaS dependency | ● | ● | ○ | partial |
● supported · ○ not supported · text = nuance
Credentials never leave your machine.
- 01Encrypted SQLite vault under ~/.authsome/. Master key file at mode 0600.
- 02API keys are never accepted as command-line arguments. Only the local browser-bridge form or a masked terminal prompt.
- 03Append-only audit log records every credential read, refresh, and policy decision.
- 04No telemetry. No cloud sync. No account. Egress only to providers you authorize.
- 05MIT licensed. Read every line.