Settings

Configure your gateway connection

Connection Status

Disconnected

API Credentials

Your Bearer token for accessing the SecretsGateway API.

Used for all authenticated API requests (vaults, items, fields, resolve).

Required for admin operations (tokens, invites, audit log, backup).

First-time access:

Use Welcome with the bootstrap token from docker compose logs init. Break-glass: read /data/admin.key from the data volume.

Matches admin.key on the gateway data volume (the process may mirror it internally; avoid putting it in compose unless you know you need an override).

Security

Manage authentication and access controls.

Multi-Factor Authentication

Set up TOTP-based MFA for additional account security

Identity Providers

Configure SSO with OIDC/SAML identity providers

Operator integrations

Cloud IAM policies, PAM mappings, KMIP registry

About

SecretsGateway Management Console

This web interface connects to your SecretsGateway instance through a server-side proxy. Your credentials are stored in browser sessionStorage (cleared when the tab closes) and are never sent except to the gateway API through the proxy layer.

The gateway URL is configured server-side via the GATEWAY_URL environment variable in the Docker Compose configuration.