Bella Baxter

🔐

Your Infrastructure, Your Rules

Bella Baxter never stores your secrets. It connects to the secret stores you already operate — Vault/OpenBao, AWS, Azure, GCP — and acts as a unified proxy.

⚡

Zero-Friction Developer Experience

Pull secrets with a single command. Run any process with secrets injected. No .env files committed, no credentials in CI/CD yaml.

🌐

Multi-Language SDKs

Official SDKs for JavaScript/TypeScript, .NET, Python, Go, Ruby, PHP, Swift, Java, Dart, and Ansible. All with typed secret code generation.

🔑

Keyless Authentication

GitHub Actions, Kubernetes, and any OIDC-capable workload can authenticate without static API keys. Trust domains verify identity automatically.

🛡️

SSH Certificate Authority

Issue short-lived SSH certificates instead of distributing static keys. Integrates with your Vault instance. Developers sign with bella ssh sign.

🔔

Webhooks & Notifications

Get notified on Slack, Discord, Teams, or Telegram when secrets change, leases expire, or security scans detect issues.

🤖

MCP / AI Integration

Expose Bella Baxter as an MCP server for Claude, GitHub Copilot, and Cursor. AI agents can manage secrets securely on your behalf.

📊

Security Intelligence

Automated scans for weak secrets, exposed credentials, and policy violations. A security dashboard so nothing slips through the cracks.

🏗️

.NET Aspire Native

First-class .NET Aspire integration. Add Bella Baxter to your Aspire AppHost with one line and all services get secrets automatically.

Why Bella Baxter?

Existing secret management tools gate the features you actually need behind expensive per-seat plans, or force you onto their infrastructure.

Bella Baxter was built differently:

Unlimited projects and environments — no artificial caps

Your own infrastructure — connect Vault, AWS, Azure, or GCP. You own your data.

Free to start — 2,000 API requests per month included, no credit card required

Self-hostable — run it yourself with Docker or .NET Aspire, forever free under ELv2

Quick Start

# Install the CLI
curl -sSfL https://raw.githubusercontent.com/cosmic-chimps/bella-baxter-cli/main/scripts/install-bella.sh | bash

# Log in
bella login

# Pull secrets into your current shell
bella pull

# Or run a command with secrets injected
bella run -- npm start

Bella BaxterUnified Secret Management Gateway