secretserver.io

The After Dark Systems ecosystem

From your workstation
to your infrastructure.

SecretServer is a hosted service, but some work happens on your own machines: applications reading secrets, servers receiving the credentials assigned to them, and signing with keys that are never exported. Each guide covers installation, configuration, operation, and the limits you need to understand before deployment.

01

SeKretSauce

macOS security

Local security monitoring, investigation, and firewall controls for macOS.

02

aikeys

Developer tooling

Named secrets for coding agents, backed by an encrypted vault or native keychain.

03

SecretServer Agent

Device access

Enroll machines and deliver assigned secrets using a signed device identity.

04

AutoHSM

Vault operations

Distributed Vault unseal automation with wrapped shares and seal-state alerts.

05

Client libraries

SDKs & integrations

Python, TypeScript, PHP, Go, Ansible, and an operation-only MCP bridge.

One API. Several ways in.

The core platform also includes the ss CLI, the ssd daemon, and a Terraform provider. Language how-tos and configuration references cover every client, flag, and environment variable.

API reference →Client how-tos →Configuration →CLI →Daemon →Terraform →

Open source

Every component listed here is public on GitHub under the MIT license. Each guide links its repository and gives the exact install or build command.

SecretServer and its software are products of After Dark Systems and are not affiliated with Delinea Secret Server.