AgentSecrets v3.x

The AgentSecrets v3.x release series marks our major architectural leap: transitioning from a secrets manager to a complete, zero-knowledge credential governance and lifecycle platform for AI agents, developers, and teams.

No breaking changes across minor releases. Seamless zero-touch migrations.

v3.2.3 (September 2026)

Improvements

Zero stdout Wrapper Noise

Removed all synchronous logging, version messages, and banners from the npm and PyPI wrapper standard output (stdout). Shell piping, environment injection (agentsecrets env -- ...), JSON outputs, and automation scripts receive clean, unpolluted output with zero noise.

Non-Blocking 24-Hour Update Notifications (stderr-Only)

Version update checks run asynchronously in the background once every 24 hours. When a newer release is published, a clean update hint is written exclusively to stderr, guaranteeing that stdout piping remains untouched.

Dynamic Runtime Package Versioning

Removed hardcoded version fallbacks in npm and Python wrappers. The wrapper dynamically derives its version directly from runtime package manifests (package.json and importlib.metadata).

Automated Binary Disk Cleanup

Upon downloading a newer release binary, the wrapper automatically purges outdated agentsecrets_* binaries from ~/.agentsecrets/bin/ to prevent disk bloat.

v3.2.2 (September 2026)

Fixes

Automatic Binary Self-Registration on Upgrade

Fixed the binary recovery ladder in cmd/agentsecrets/commands/root.go to explicitly execute keychainauth.EnsureRegistered(kcPath). When upgrading via Homebrew (brew upgrade), npm, or pip, the newly placed binary automatically submits its SHA-256 hash to keychain-auth authorize on the first invocation without requiring manual elevation.

v3.2.1 (September 2026)

Additions

Self-Hosted Server Management (agentsecrets server)

Complete CLI support for connecting to open-source self-hosted instances:

• agentsecrets server get — inspect the active server URL and configuration source.
• agentsecrets server set <URL> — configure target server globally or per-project (--project).
• agentsecrets server status — probe live connectivity and latency.
• agentsecrets server reset — restore target back to the default AgentSecrets Server.
• Hierarchical endpoint resolution: CLI Flag → AGENTSECRETS_SERVER_URL → Project Config → Global Config → Default Server.

Bidirectional Server Data Migration (agentsecrets migrate)

Native protocol for migrating workspaces, projects, environments, and secrets between the default AgentSecrets Server and Self-Hosted Server instances with full zero-knowledge encryption preservation.

• Ephemeral 30-minute single-use migration token handshake (agentsecrets migrate token).
• Secure export (agentsecrets migrate export) and import (agentsecrets migrate import) maintaining client-side ciphertext envelopes.

Improvements

Sub-Second keychain-auth (<500ms) Provisioning

Eliminated slow Homebrew update delays during initial CLI setup by introducing a fast Tier-1 direct binary stream.

Linux Daemon Security Isolation (keychain-auth v3.2.5)

Linux daemons run unprivileged under keychain-auth:keychain-auth with state stored in /var/lib/keychain-auth (0600 permissions).

WSL Host-Interop DPAPI

WSL environments automatically leverage Windows Credential Manager DPAPI for hardware-backed master key protection.

Canonical Domain Standardization

Standardized all default API routing and documentation URLs to agentsecrets.tech.

v3.2.0 (August 2026)

Performance

Faster Startup

Commands start approximately 200 ms faster by eliminating unnecessary startup probes and lazily constructing the CLI application graph for help/version flags.

Master Key Lifetime Caching

The daemon retrieves the master encryption key once during its lifetime instead of re-deriving it for every operation, eliminating expensive helper process launches on WSL. Batch operations complete in milliseconds instead of seconds.

High-Throughput Proxy Redaction

Optimized Boyer-Moore multi-pattern matching with zero-allocation buffer pooling for real-time response body and header credential redaction.

Additions

50+ Natural Verb-Noun Aliases

Added intuitive command shortcuts matching natural developer syntax:

• Secrets: list-secrets, get-secret, set-secret, pull-secrets, push-secrets, delete-secret, diff-secrets
• Projects: create-project, list-projects, use-project, update-project, delete-project, invite-project
• Workspaces: create-workspace, list-workspaces, switch-workspace, invite-workspace, list-members, remove-member, promote-member, demote-member
• Allowlists: add-allowlist, remove-allowlist, list-allowlists
• Agents: register-agent, list-agents, issue-token, list-tokens, revoke-token
• Logs: list-logs, show-log, watch-logs, export-logs, verify-logs, replay-log

Metadata Caching

Secret names and policies are cached for 5 seconds locally (AGENTSECRETS_KEYCHAIN_CACHE_TTL_MS), keeping batch reads instantaneous while ensuring secret rotations remain immediate.

Improvements

Strict File Permissions (0600)

Environment files written or exported by AgentSecrets enforce strict 0600 permissions (owner read/write only).

v3.1.1 (August 2026)

Additions

Structured JSON Output for call (--output json)

The agentsecrets call command supports programmatic consumption via the --output json flag, outputting a structured JSON envelope with HTTP status, sanitized headers, and body.

Improvements

Extended Header Redaction

The proxy's real-time redaction engine scrubs reflected credentials in upstream HTTP response headers (Set-Cookie, WWW-Authenticate, Location).

v3.1.0 (August 2026)

Improvements

Safer Authentication & Reliability

• Server-Side Session Generation: Session tokens are generated exclusively on the server during rotation.
• Personal Workspace Protection: Personal workspaces are protected against accidental deletion across all service layers.
• Safe Token Refresh: Non-idempotent requests refresh tokens without corrupted request replays.

Fixes

• Telemetry Counters: Fixed telemetry counters discarding proxy redaction statistics during reloads.
• Buffer Allocation: Increased client read buffers to 10 MB for large prefix-read frames.

v3.0.0 (August 2026)

Additions

Agent Identity & Capabilities

LLM agents run under a formal identity framework with granular allow/deny capabilities (agentsecrets agent policy set).

Secret-Level Policies

Define fine-grained, secret-specific usage rules matching target domains, HTTP methods, and manual developer approval workflows.

Zero-Disk Configuration Storage

All session tokens and workspace keys reside exclusively in native OS Keychains via keychain-auth daemon, eliminating unencrypted config files on disk.

Forensic Governance Logs & Replay

Tamper-proof audit logging in SQLite with SHA-256 cryptographic hash chaining (agentsecrets logs verify, agentsecrets logs replay).

Child Process Output Masking

Mandatory stdout/stderr stream masking for agentsecrets env -- <cmd> replacing reflected secret values and encoded variants with [REDACTED].

Expanded Model Context Protocol (MCP) Server

Native MCP tools for Claude Desktop, Cursor, and Windsurf (list_secrets, api_call).

Upgrading & Migration

1Upgrade the CLI

brew update && brew upgrade The-17/tap/agentsecrets

2Verify the Upgrade

Confirm the updated binary is running:

agentsecrets --version