vaultwarden
Drop a secret once — into your Vaultwarden/Bitwarden vault and a local 600 env file. GUI + CLI, Win/Lin/mac.
Just-in-time API keys for AI agents - and any other process you route through it: the caller only ever sees a placeholder.