Software Release & Deployment Management › Configuration & Secrets Management

Configuration & Secrets Management

BC-4210.60 Level 2 Software & Technology 73 providers 105 API surfaces 25 rated strong or better

Management of runtime configuration values and secrets consumed by product services.

Configuration & Secrets Management (BC-4210.60) is a level-2 business capability under Software Release & Deployment Management in the Software & Technology model. The catalog holds 105 API surface(s) from 73 provider(s) that can perform some part of it, 25 of them rated strong or better. Reach is the vendor surface that lands on this capability — it is not a claim about what any particular organisation has deployed.

Where this capability definition comes from. This capability is part of a published business-architecture model that API Evangelist did not author. It is redistributed here under CC-BY-4.0. Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 Changes: Consolidated from 333 per-L1 YAML files into one JSON; English only (upstream i18n/ omitted); descriptions whitespace-normalised. No capability was added, removed, renamed or re-parented. Source repository · NOTICE and third-party framework attributions

Sub-capabilities

Runtime Configuration Management BC-4210.60.10

Storage, distribution, and audit of runtime configuration values.

no catalog coverage

Secret Lifecycle Management BC-4210.60.20

Issuance, rotation, and revocation of secrets used by product services.

no catalog coverage

Providers that reach this capability

Ordered by rating band. Reach means a provider publishes an API surface that can perform some part of this capability — it is not a claim that any particular organisation has deployed it.

Exemplar 12 Complete, well-documented, and agent-ready
GitHub ActionsSecretsVariables2 APIs82.8CloudflareSecrets1 API80.6Adobe SuiteSecretsVariables2 APIs78.3TwilioSecrets1 API77.8Microsoft AzureNamedValue1 API76.2KongConfig Store SecretsConfig StoresVaults3 APIs73.2NetlifyenvironmentVariables1 API71.5Cracked APISecrets1 API70.3falSecrets1 API68.6StrivacityVariables1 API67.9CircleCIContext1 API67.6UnityConfig1 API67.2
Strong 13 Solid coverage with minor gaps
Oraclevaults1 API66.0FastlySecret Store1 API65.2KoyebSecrets1 API63.5Webscale NetworksSecrets1 API62.3ParticleSecrets1 API62.2FacetsVariable Management1 API61.5Cognition LabsSecrets1 API60.6InfluxDataSecrets1 API60.1UpsunEnvironment VariablesProject Variables2 APIs60.1Cloud FoundryEnvironment Variable Groups1 API58.8AptibleConfigurations1 API58.5Platform.shEnvironment VariablesProject Variables2 APIs57.9Prime IntellectSecrets1 API55.0
Developing 33 Usable, with meaningful gaps to close
Fermyonvariable-pairs1 API53.8Trigger.devEnvironment Variables1 API53.7ReleaseConfigs1 API52.6ScalewaySecrets1 API51.6AmikaSecrets1 API50.8RenderEnvironment Groups1 API50.5CapyEnvironment Variables1 API49.4CodesphereVault1 API49.3GoliothSecrets1 API48.0Amazon Systems ManagerParameter Store1 API47.7Google Cloud Secret ManagerSecret VersionsSecrets2 APIs47.5NevercodeSecrets and Environment Vars1 API47.4SemaphoreProjectSecretsSecrets2 APIs47.3Alokai (formerly Vue Storefront)v2.2/instance/{namespace}/env_vars1 API46.5MacrometaSecrets1 API45.9Apollo ConfigItemsNamespaces2 APIs45.8ConvexEnvironment Variables1 API45.4GitLab CI/CDci_variables1 API45.1InfisicalDynamic SecretsSecret ImportsSecret RotationsSecret Syncs5 APIs44.8PulumiEnvironmentsStackConfig2 APIs44.5Flatfilesubpackage_secrets1 API44.2Ava ProtocolSecrets1 API43.6HerokuConfig Vars1 API43.4StreamlitSecrets1 API43.1QuantCDNVariables1 API42.9SupabaseSecrets1 API42.9PorterCredentialSetsParameterSets2 APIs42.4QoveryApplication ConfigurationApplication Environment VariableApplication SecretContainer Environment Variable13 APIs42.0Woodpecker CIOrganization SecretsRepository secretsSecrets3 APIs41.8DockerSecret1 API41.1Prophecy.ioSecrets1 API40.6BentoMLorganization secretsorganization secrets with check messagesecret names3 APIs40.4ZededaKubernetesSecrets1 API39.3
Thin 13 Limited public surface area
DroneSecrets1 API39.1DecodableSecrets1 API38.3Argo CDRepoCredsService1 API38.1Spring Cloud ConfigConfiguration1 API38.0PipecatSecrets1 API36.0Calyptiacore_instance_secret1 API35.8InfluxDBSecrets1 API35.7FlightcontrolEnvironment Variables1 API35.2DopplerConfigsSecrets2 APIs30.9HashiCorp Cloud PlatformSecrets1 API30.0NacosConfiguration1 API29.9OrkesSecrets1 API28.1HashiCorpSecrets1 API27.5
Emerging 2 Early or largely undocumented
Deutsche Telekomsecrets1 API26.0StacklokSecrets1 API15.2
This page carries no rating. Capabilities are not rated. A capability is a description of what a business does, not a thing a company publishes, so a Kin Score would have nothing to measure.
The edge table is a Pro feature. This page shows which providers and tags reach Configuration & Secrets Management. The underlying tag → capability edges — each with the quoted fragment of the provider's own OpenAPI that evidences it, a calibrated confidence score, and the contract-provenance gate it passed — are available through the API, along with company-level capability maps. Only edges at confidence ≥ 0.7 with evidence found verbatim in the source contract are published at all.

See plans →  ·  How the edges are graded →