authsome

Every agent I've built starts the same way. Paste an API key into .env, export it, hope it doesn't end up in a log or a subprocess env dump. token expires and something quietly breaks. We've all been there so I wrote authsome. The bit I think is actually interesting is the run command: authsome run -- python my_agent.py It launches the child behind a local auth proxy and the proxy intercepts outbound HTTPS and injects Auth headers at request time. the child process never has the secret in its environment, so it can't leak through os.environ, ps -e, or anything that dumps a subprocess env and the agent code doesn't change as well. the tokens are stored locally, encrypted, and refreshed before they expire. Oauth flows for interactive and headless, plus a browser bridge for API-key providers. There is a cli for pulling headers directly wh

I'm building https://github.com/manojbajaj95/authsome to solve similar problem. Would love to know your opinion.

Try out, https://github.com/manojbajaj95/authsome . I'm trying to work with LLM secrets too. Still alpha, but thats the direction i'm taking

Been tinkering with something of my own at https://github.com/manojbajaj95/authsome. Core goal was to do credential management, from an ease point of view and not security.