Best Secrets Managers for AI Agents 2026: Vaulting Compared
The short answer
Infisical for most agent teams, Doppler for the smallest setup, AWS Secrets Manager if you live on AWS, HashiCorp Vault for large enterprises that need every dynamic-secret backend. The tool matters less than the pattern: a credential the model can read is a credential a prompt injection can steal. Vault the secret, give each agent its own identity, and broker the credential at the network edge. Prices are list USD as of October 16, 2026.
The comparison
| Tool | Pricing model | Agent-relevant features | Self-host | Best for |
|---|---|---|---|---|
| Infisical | Free (5 identities); Pro $20/identity/month annual; Advanced $40 (dynamic secrets) | Machine identities, dynamic secrets, rotation, Agent Vault broker proxy (5,000 requests/month free, then $2 per 1,000) | ✅ MIT core | Most agent teams |
| Doppler | Team $21/user/month; AI agents and non-human identities free | CLI injection (doppler run), service tokens, syncs to clouds | ❌ | Small teams, many agents |
| AWS Secrets Manager | $0.40/secret/month + $0.05 per 10,000 API calls | IAM roles per agent, automatic rotation, CloudTrail audit | ❌ (AWS only) | AWS-native agents |
| HashiCorp Vault | Community edition free; HCP Vault Dedicated and Enterprise by quote | Broadest dynamic-secret engines, leases, policies | ✅ | Large enterprises, many backends |
| 1Password | Business and Enterprise plans; quote for Unified Access | Service accounts, Unified Access for people, AI agents and machines | ❌ | Companies already on 1Password |
Why agents need more than a vault
A classic secrets manager hands the secret to the application. For an AI agent, “the application” includes a model that reads untrusted web pages, issues and files. Three controls close that gap:
- One identity per agent. Infisical bills per identity and gives each a scoped role; AWS uses an IAM role per agent; Doppler lets non-human identities in for free, which removes the incentive to share one token across ten agents.
- Short-lived credentials. Dynamic secrets (Vault, Infisical Advanced) mint a database user or cloud key per task and revoke it on lease expiry. A leaked credential then dies in minutes.
- Brokering instead of handing over. Infisical’s Agent Vault is an HTTP credential proxy: the agent sends a request with a placeholder, the proxy checks method and path rules and attaches the real credential on the way out. The secret never enters the context window, logs or memory. It works with Claude Code, OpenClaw and custom harnesses.
Tool notes
Infisical. The only option here that covers all three controls in one product, with an open-source core you can run yourself. The Free plan’s 5-identity cap is the main limit: a multi-agent system outgrows it quickly, and at $20 per identity per month a fleet of 20 agent identities costs $400 a month on Pro — budget for that, or self-host.
Doppler. Per-seat pricing with free machine identities makes it the cheapest hosted option when you run many agents and few humans. It has no dynamic secrets, so pair it with short-lived tokens issued by the target service where possible.
AWS Secrets Manager. Pay per secret and per call, rotation built in, audit through CloudTrail. Cheap for a few dozen secrets; it can get expensive if agents fetch secrets on every request, so cache them in the runtime for the lease period.
HashiCorp Vault. The deepest dynamic-secret engine catalogue and policy language, at the cost of operating it or paying for HCP Vault Dedicated. Note that IBM retired the simpler HCP Vault Secrets SaaS on July 1, 2026; teams still on it had to move.
1Password. Sensible if your people already use it: service accounts give agents access to specific vaults, and its Unified Access product now covers AI agents alongside humans and machines.
How to choose
- Building a multi-agent product and want the full pattern: Infisical (self-host or Advanced).
- Five engineers, twenty agents, minimum setup: Doppler.
- Everything already in AWS: Secrets Manager with one IAM role per agent.
- Regulated enterprise with many databases and clouds: HashiCorp Vault.
For the operating rules around these tools, see short-lived credentials for AI agents and how to give AI agents credentials without leaking them.
Last verified: October 16, 2026. Prices are list USD from vendor pricing pages.