1Password

1Password is a password manager and digital vault developed by AgileBits Inc. It stores and synchronizes passwords, secure notes, and credentials across devices and provides password generation, secure sharing, and access-management features for individuals, teams, and enterprises.

HashiCorp Vault is a secrets-management product for securely storing, accessing, and controlling access to tokens, passwords, certificates, encryption keys, and other sensitive data. It can be used through a user interface, command-line interface, or HTTP API, including by agent runtimes that fetch credentials from the vault. Vault includes a key-value secrets engine for persisting arbitrary secrets, a database secrets engine that dynamically generates credentials from configured roles, and a Transit secrets engine that provides encryption as a service for data in transit. Its documented use cases include storing and deploying application, system, and infrastructure secrets, managing database credential lifecycles, and encrypting data at rest and in transit.

Bitwarden is an open-source password manager for individuals, teams, and enterprises. It stores, shares, and manages passwords, passkeys, and other secrets, and can generate random secrets such as the one used in the video’s Euro Office configuration.

jit is a local-first macOS command-line secrets manager from jitpass that moves development credentials from plaintext files such as .env, AWS credentials, shell exports, npm configuration, and MCP configurations into an encrypted vault protected by Touch ID. It rewrites source files with decoys so existing tools can continue working while the real value is released only to an authorized process. It provides credentials through per-process environment injection, native credential protocols such as AWS credential_process and Docker or Git credential helpers, and a named-pipe mount for tools that only read files. The named pipe is a mode-0600 POSIX FIFO: authorized reads receive decrypted values through the kernel pipe buffer without writing them to disk, while ambient readers receive decoys. jit is macOS-only for Apple Silicon and is still in development; the project states that it does not protect credentials after they enter the requesting process's memory.

Keycloak is an open-source identity and access management system for applications and services. It provides user federation, strong authentication, user management, fine-grained authorization, and support for identity protocols including OpenID Connect and SAML; in the described agent-security context, agents can be registered as OAuth2 clients. The project can be run from its distribution or Docker image and is licensed under the Apache License 2.0.