Welcome to Passport
Passport is a secure API access system that lets your team call authenticated APIs without distributing or exposing real secrets.
In most organizations, sharing API access means sharing API keys. Once a key is handed out, you’ve lost control of it. Keys get leaked, reused, or passed along without your knowledge. Passport removes secrets from the equation entirely. Instead of receiving an API key, consumers get a token that proves they’re authorized to call a specific API. The real secret never leaves your cloud. Only the Passport Proxy, running inside your infrastructure, ever resolves it.
Passport is in beta.
Benefits of Passport
-
Secure by design — Secrets are resolved inside your cloud and never leave it. Every request is cryptographically authenticated and every call is audited.
-
Granular, revocable access — Access is granted per API, not per team or environment. Passport Admins can approve or revoke access to a specific API at any time.
-
No code changes required — External clients like curl, scripts, and SDKs route through a local daemon transparently. Passport works with the tools your developers already use.
-
Compliance-friendly — Secrets never pass through an external network, making Passport suitable for teams in regulated industries where third-party secret exposure is a risk.
-
Bring your own secret store — Passport connects to HashiCorp Vault, AWS Secrets Manager, and Google Cloud Secret Manager.