Feature

Secrets & Credential Management

Safe storage and rotation of keys and secrets.

20 providers 192 APIs 15 declared variants

Credentials, tokens, and connection secrets are stored encrypted with rotation and scoped retrieval, rather than living in config files. Reduces the blast radius of a leak.

20 API providers on the APIs.io network offer secrets & credential management. The highest-rated are Amazon Secrets Manager, Amazon KMS, 1Password, emnify, Azure Kubernetes Service.

Providers

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 5 Complete, well-documented, and agent-ready
Amazon Secrets Manager Amazon Secrets Manager helps you manage, retrieve, and rotate database credentials, API keys, and other sec... 5 APIs 77.7 Amazon KMS AWS Key Management Service (KMS) is a managed service that makes it easy to create and control the cryptogr... 2 APIs 72.4 1Password 1Password is a password manager that helps individuals and businesses securely store and manage passwords, ... 11 APIs 72.3 emnify emnify is a cloud-native global IoT cellular connectivity provider operating its own mobile core and SuperN... 29 APIs 68.3 Azure Kubernetes Service Azure Kubernetes Service (AKS) simplifies deploying a managed Kubernetes cluster in Azure by offloading the... 7 APIs 67.6
Strong 6 Solid coverage with minor gaps
Sketchfab Sketchfab is the largest dedicated platform for publishing, sharing, discovering, buying, and embedding int... 14 APIs 65.1 Elastic.io Elastic IO is a cloud-based integration platform that helps businesses effortlessly connect their various a... 22 APIs 61.0 Toolhouse Toolhouse is a Backend-as-a-Service platform for building, deploying, and managing "AI workers" (Toolhouse'... 8 APIs 60.9 Alteryx Alteryx is an analytics automation platform that enables data analysts and scientists to break data barrier... 12 APIs 59.6 Smithery Smithery is an MCP server registry and hosting platform that lets developers discover, publish, and connect... 9 APIs 58.3 Azure Key Vault Azure Key Vault is a cloud service for securely storing and accessing secrets, keys, and certificates. It h... 6 APIs 57.7
Developing 2 Usable, with meaningful gaps to close
DreamFactory Automate the building, securing, and documenting of REST APIs for data products with built-in enterprise se... 16 APIs 55.4 Login.gov Login.gov is the U.S. federal government's secure single sign-on and identity verification service for the ... 7 APIs 52.3
Thin 4 Limited public surface area
Polar Polar Electro Oy (operating as Polar Global) is a Finnish sports and fitness technology company founded in ... 19 APIs 37.6 Biogen Biogen is a global biotechnology company that discovers, develops, and delivers therapies for people living... 2 APIs 33.5 BMW ConnectedDrive BMW ConnectedDrive is BMW Group's umbrella for connected vehicle services spanning navigation, remote servi... 4 APIs 31.8 AWS CLI The AWS Command Line Interface (AWS CLI) is a unified tool to manage AWS services from the command line. Wi... 1 API 31.2
Emerging 2 Early or largely undocumented
Glama Glama is an all-in-one AI workspace combining an MCP server marketplace and registry, a managed MCP gateway... 7 APIs 27.2 Quantinuum Quantinuum is an integrated quantum computing company formed by the 2021 merger of Honeywell Quantum Soluti... 9 APIs 17.2
Minimal 1 Almost no public developer surface
SST SST is an open source TypeScript framework for building full-stack applications on your own infrastructure.... 2 APIs 8.8

What Providers Actually Declared

This feature is a canonical term. These are the free-text strings providers wrote in their own apis.yml that map onto it.

API Key ManagementAutomatic Key RotationAutomatic Secret RotationCentralised Credential ManagementCredential ManagementEncrypted secrets management via `sst secret`JWKS endpoint with at-least-annual key rotation; SAML certs rotated yearly with year-versioned endpointsJWT short-lived bearer tokens with refresh-token rotationMCP Gateway with per-user endpoint, full JSON-RPC payload logging, per-tool access control, OAuth 2.1 credential management, audit log export, and session lifecycle trackingNexus cloud platform with project, team, role, quota, and credential managementOAuth 2.0 with Authorization Code, Implicit, and Password grants plus refresh-token rotation; bearer access tokens expire after one monthOne-hour ID tokens with refresh-token rotationPartner registration and OAuth credential management at admin.polaraccesslink.comPer-server secrets management for storing API keys and credentials used at runtimeSecrets Management

Scroll for all 15