- Home
- Secrets Management Tools
- Teller
Teller
What it is
Teller is an open-source secret manager for developers who need to handle secrets while developing, testing, and building apps. It connects to vaults, key stores, and cloud services for individual environments or team workflows. Named integrations include HashiCorp Vault, AWS Secrets Manager, Google Secret Manager, HashiCorp Consul, AWS SSM, and dotenv providers; its documentation also lists etcd and an in-memory store. The `teller run` command launches a subprocess with variables fetched through Teller, and `teller env` can provide a Docker `--env-file`. Teller can scan code for secrets, including in CI with `--error-if-found`, which returns exit code 1 when it finds one. It can redact secrets from process output, logs, live log tails, and files. Provider mappings can set a root path, mapping ID, and optional key renames, while configuration templates can use environment variables. The project describes copying or syncing mapped values, writing values to providers, and deleting them. Write operations depend on provider support. Teller is free, Apache-2.0 licensed, and available for Linux, macOS, and Windows.
For and against
For
- Free and Apache-2.0 licensed.
- Connects to several named vault and cloud providers.
- Can scan code for secrets in CI.
- Redacts secrets from output, logs, and files.
Against
- Write operations require provider support.
- No listed platform-specific support evidence beyond a Linux issue report.
The verdict
Teller combines provider-based secret management with scanning and redaction tools. Check that your provider supports write operations if you need to change stored values.
Who it suits
Teller suits developers and teams managing secrets across app development, testing, and builds. Its CI scanning and subprocess environment features may also suit workflows that inject secrets during builds.
Plans and prices
Teller
Open-source universal secret manager for developers
Read 4 Oct 2026 · github.com
On the record
- Configuration
- Provider mappings can specify a root path, mapping ID, and optional key renames; configuration can use environment variables in templates.github.com · read 4 Oct 2026
- Environment variables
- The `teller run` command can run a subprocess with variables fetched through Teller, and `teller env` can supply a Docker `--env-file`.github.com · read 4 Oct 2026
- Install
- The project offers downloadable release binaries and a source installation method using `cargo install --path .`.github.com · read 4 Oct 2026
- Integrations
- The README names HashiCorp Vault, AWS Secrets Manager, Google Secret Manager, HashiCorp Consul, AWS SSM, and dotenv providers.github.com · read 4 Oct 2026
- License
- The GitHub repository identifies the project as Apache-2.0 licensed.github.com · read 4 Oct 2026
- Notable limitation
- The README says write operations are available only for providers that support write use cases.github.com · read 4 Oct 2026
- Platform evidence
- A 2025 issue reports testing Teller 2.0.7 on Linux x86_64; the opened pages do not establish support for other platforms.github.com · read 4 Oct 2026
- Provider list
- The provider documentation also lists etcd and an in-memory store.docs.rs · read 4 Oct 2026
- Provider operations
- The README describes copying or syncing mapped values, writing values to supported providers, and deleting values from providers.github.com · read 4 Oct 2026
- Purpose
- Teller is an open-source secret manager for developers working with secrets while developing, testing, and building apps.github.com · read 4 Oct 2026
- Redaction
- Teller can redact secrets from process output, logs, live log tails, and files.github.com · read 4 Oct 2026
- Secret scanning
- Teller can scan code for secrets and can be run in CI with `--error-if-found`, which returns exit code 1 when it finds something.github.com · read 4 Oct 2026
- Use case
- It connects to vaults, key stores, and cloud services to help manage secrets for an individual environment or team workflow.github.com · read 4 Oct 2026
