Rotating Credentials
If an API key is compromised or reaches its lifecycle end, you need to rotate it.
AgentSecrets makes rotation seamless across your entire team and production environments simultaneously.
1Update the Secret
Generate the new API key in the provider's dashboard (e.g., Stripe, OpenAI). Then, update the secret in AgentSecrets:
agentsecrets secrets set STRIPE_KEY=sk_test_NEW_VALUE --all-envs
Using the --all-envs flag ensures the new key is applied to development, staging, and production instantly (if applicable).
2Push to Cloud
Push the new encrypted blob to the sync server:
agentsecrets secrets push
3Team Updates
Your teammates simply run agentsecrets secrets pull to receive the new key.
Production servers running the proxy as a sidecar will automatically poll for changes (or can be triggered via webhook) and update their in-memory keychain without requiring a restart or redeployment of your application code!