Feature

Secrets & Credential Management

Safe storage and rotation of keys and secrets.

22 providers 81 APIs 15 declared variants

Credentials, tokens, and connection secrets are stored encrypted with rotation and scoped retrieval, rather than living in config files. Reduces the blast radius of a leak.

22 API providers on the APIs.io network offer secrets & credential management. The highest-rated are Amazon Secrets Manager, 1Password, Azure Kubernetes Service, Amazon KMS, Sketchfab.

Providers

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 2 Complete, well-documented, and agent-ready
Amazon Secrets Manager Amazon Secrets Manager helps you manage, retrieve, and rotate database credentials, API keys, and other sec... 1 API 73.1 1Password 1Password is a password manager that helps individuals and businesses securely store and manage passwords, ... 3 APIs 70.1
Strong 6 Solid coverage with minor gaps
Azure Kubernetes Service Azure Kubernetes Service (AKS) simplifies deploying a managed Kubernetes cluster in Azure by offloading the... 8 APIs 66.7 Amazon KMS AWS Key Management Service (KMS) is a managed service that makes it easy to create and control the cryptogr... 1 API 66.3 Sketchfab Sketchfab is the largest dedicated platform for publishing, sharing, discovering, buying, and embedding int... 5 APIs 64.7 Azure Kubernetes Service Azure Kubernetes Service (AKS) simplifies deploying a managed Kubernetes cluster in Azure by offloading the... 8 APIs 64.5 emnify emnify is a cloud-native global IoT cellular connectivity provider operating its own mobile core and SuperN... 4 APIs 63.2 Toolhouse Toolhouse is a Backend-as-a-Service platform for building, deploying, and managing "AI workers" (Toolhouse'... 2 APIs 61.0
Developing 7 Usable, with meaningful gaps to close
Azure Key Vault Azure Key Vault is a cloud service for securely storing and accessing secrets, keys, and certificates. It h... 5 APIs 56.8 Alteryx Alteryx is an analytics automation platform that enables data analysts and scientists to break data barrier... 7 APIs 56.1 Smithery Smithery is an MCP server registry and hosting platform that lets developers discover, publish, and connect... 2 APIs 55.5 Elastic.io Elastic IO is a cloud-based integration platform that helps businesses effortlessly connect their various a... 1 API 51.5 Azure Key Vault Azure Key Vault is a cloud service for securely storing and accessing secrets, keys, and certificates. It h... 5 APIs 51.1 Login.gov Login.gov is the U.S. federal government's secure single sign-on and identity verification service for the ... 2 APIs 50.1 DreamFactory Automate the building, securing, and documenting of REST APIs for data products with built-in enterprise se... 1 API 46.6
Thin 2 Limited public surface area
Biogen Biogen is a global biotechnology company that discovers, develops, and delivers therapies for people living... 1 API 44.5 AWS CLI The AWS Command Line Interface (AWS CLI) is a unified tool to manage AWS services from the command line. Wi... 1 API 33.3
Emerging 4 Early or largely undocumented
Glama Glama is an all-in-one AI workspace combining an MCP server marketplace and registry, a managed MCP gateway... 7 APIs 29.5 Polar Polar Electro Oy (operating as Polar Global) is a Finnish sports and fitness technology company founded in ... 3 APIs 29.3 BMW ConnectedDrive BMW ConnectedDrive is BMW Group's umbrella for connected vehicle services spanning navigation, remote servi... 3 APIs 27.2 Quantinuum Quantinuum is an integrated quantum computing company formed by the 2021 merger of Honeywell Quantum Soluti... 9 APIs 19.4
Minimal 1 Almost no public developer surface
SST SST is an open source TypeScript framework for building full-stack applications on your own infrastructure.... 2 APIs 10.9

What Providers Actually Declared

This feature is a canonical term. These are the free-text strings providers wrote in their own apis.yml that map onto it.

API Key ManagementAutomatic Key RotationAutomatic Secret RotationCentralised Credential ManagementCredential ManagementEncrypted secrets management via `sst secret`JWKS endpoint with at-least-annual key rotation; SAML certs rotated yearly with year-versioned endpointsJWT short-lived bearer tokens with refresh-token rotationMCP Gateway with per-user endpoint, full JSON-RPC payload logging, per-tool access control, OAuth 2.1 credential management, audit log export, and session lifecycle trackingNexus cloud platform with project, team, role, quota, and credential managementOAuth 2.0 with Authorization Code, Implicit, and Password grants plus refresh-token rotation; bearer access tokens expire after one monthOne-hour ID tokens with refresh-token rotationPartner registration and OAuth credential management at admin.polaraccesslink.comPer-server secrets management for storing API keys and credentials used at runtimeSecrets Management

Scroll for all 15