# portunus

> Boundary-only secret broker keeping credentials out of LLM contexts

Portunus is a standalone secret broker that allows AI agents to use vault secrets without exposing raw credentials to the LLM's context, logs, or tool outputs. It resolves secrets using metadata tags and injects values strictly at the execution boundary via subprocesses, environment variables, or temporary files. It is run primarily through a command-line interface, as a Model Context Protocol (MCP) server, or in Docker containers.

- Source: https://github.com/mdostal/portunus
- Homepage: https://mdostal.github.io/portunus/
- License: MIT
- Built with: Python 84.1%, TypeScript 11.2%, HTML 1.6%, Rust 1.1%, Other 2.0%
- Stars: 2
- Forks: 0
- Contributors: 3
- Last commit: 2026-10-21
- Latest release: v0.34.0 (2026-10-15)
- Purpose: AI & LLM tooling, MCP servers, Security & identity
- Type: Docker / self-host, CLI
- For: Personal, Enterprise
- Enterprise signals: rbac, audit log

## Worth score: 53/100

How much DigGitHub recommends it, from activity, adoption, docs, license and security signals.

- Popularity: 2/25
- Momentum: 10/20
- Maintenance: 25/25
- Community: 1/15
- Readiness: 15/15

## Downloads

Latest release: [v0.34.0 — Chrome saved-login backend](https://github.com/mdostal/portunus/releases/tag/v0.34.0). Files from the project's GitHub release, not checked by DigGitHub.

Other files:

- [portunus-desktop-0.34.0.zip](https://github.com/mdostal/portunus/releases/download/v0.34.0/portunus-desktop-0.34.0.zip) (21 MB, 4 downloads)

## Alternatives

- [agent-vault](https://diggithub.com/CrimsonWorks-Inc/agent-vault.md): Local credential proxy for coding agents
- [keyward](https://diggithub.com/arturayupov/keyward.md): Local, encrypted secret broker for AI coding agents
- [mcp-warden](https://diggithub.com/ermoluk/mcp-warden.md): Local-first credential broker and MCP server for AI agents
- [agentgate](https://diggithub.com/agentkitai/agentgate.md): Human-in-the-loop approval workflows for AI agents
- [mcp-approvals](https://diggithub.com/marklynd/mcp-approvals.md): Human-in-the-loop approval gate and audit log for AI agents
- [Strix](https://diggithub.com/usestrix/strix.md): AI agents that pentest your own apps
- [excel-mcp-server](https://diggithub.com/haris-musa/excel-mcp-server.md): MCP server to create and edit Excel spreadsheets with AI
- [firecrawl-mcp-server](https://diggithub.com/firecrawl/firecrawl-mcp-server.md): MCP server for web scraping, crawling, and search with Firecrawl

---

Source page: https://diggithub.com/mdostal/portunus
Updated: 2026-10-30