Skip to content
SPECIFICTION
Get listed

Teller

github.com

Free plan WindowsmacOSLinux
Visit github.com
Spec score 7.3 #27 of 46 in Secrets Management Tools

What it is

Teller is a free, Apache-2.0 open-source secret manager for developers working with secrets during development, testing, and app builds. It connects to vaults, key stores, and cloud services for personal environments or team workflows. Named integrations include HashiCorp Vault, AWS Secrets Manager, Google Secret Manager, HashiCorp Consul, AWS SSM, dotenv, etcd, and an in-memory store. The `teller run` command can start a subprocess with fetched variables, while `teller env` can provide a Docker `--env-file`. Teller can scan code for secrets and return exit code 1 in CI when run with `--error-if-found`. It can also redact secrets from process output, logs, live log tails, and files. Provider mappings can specify a root path, mapping ID, and key renames; configuration templates can use environment variables. The project offers release binaries and source installation with `cargo install --path .`. Write operations are available only through providers that support them.

Spec sheet

Purpose
Teller is an open-source secret manager for developers working with secrets while developing, testing, and building apps.Read 4 Oct 2026 · github.com
Integrations
The README names HashiCorp Vault, AWS Secrets Manager, Google Secret Manager, HashiCorp Consul, AWS SSM, and dotenv providers.Read 4 Oct 2026 · github.com
License
The GitHub repository identifies the project as Apache-2.0 licensed.Read 4 Oct 2026 · github.com
Configuration
Provider mappings can specify a root path, mapping ID, and optional key renames; configuration can use environment variables in templates.Read 4 Oct 2026 · github.com
Environment variables
The `teller run` command can run a subprocess with variables fetched through Teller, and `teller env` can supply a Docker `--env-file`.Read 4 Oct 2026 · github.com
Install
The project offers downloadable release binaries and a source installation method using `cargo install --path .`.Read 4 Oct 2026 · github.com
Notable limitation
The README says write operations are available only for providers that support write use cases.Read 4 Oct 2026 · github.com
Platform evidence
A 2025 issue reports testing Teller 2.0.7 on Linux x86_64; the opened pages do not establish support for other platforms.Read 4 Oct 2026 · github.com
Provider list
The provider documentation also lists etcd and an in-memory store.Read 4 Oct 2026 · docs.rs
Provider operations
The README describes copying or syncing mapped values, writing values to supported providers, and deleting values from providers.Read 4 Oct 2026 · github.com
Redaction
Teller can redact secrets from process output, logs, live log tails, and files.Read 4 Oct 2026 · github.com
Secret scanning
Teller can scan code for secrets and can be run in CI with `--error-if-found`, which returns exit code 1 when it finds something.Read 4 Oct 2026 · github.com
Use case
It connects to vaults, key stores, and cloud services to help manage secrets for an individual environment or team workflow.Read 4 Oct 2026 · github.com

Plans and prices

Teller Free Open-source universal secret manager for developers Read 4 Oct 2026 · github.com

Every Teller plan and price →

Strong points and limits

Strong points

  • Connects to cloud, vault, key store, and dotenv providers.
  • Can scan for secrets and fail CI with exit code 1.
  • Redacts secrets from logs, output, and files.
  • Offers release binaries and source installation.

Limits

  • Write operations depend on provider support.
  • Opened pages establish platform testing only on Linux x86_64.

Who it suits

Teller suits developers who need to manage secrets across development, testing, builds, or CI workflows. It may also fit teams connecting multiple secret providers through configuration.

Verdict

Teller brings provider connections, secret scanning, and redaction into a free open-source tool. Confirm that your chosen provider supports any write operations you need.

Where Specifiction places it

Alternatives to TellerAll alternatives →