Keep an inventory of API keys and services
Which API keys and services exist, who owns each one, what uses it and when it was last rotated. The secrets stay in Vault or 1Password, and ADoor, your data account, keeps the map around them.
An example
@ADoor Add the Stripe live key: owned by Ali, used by the billing service and the nightly reconciliation job, stored in Vault at secret/stripe/live, last rotated Aug 12.
ADoor Added 1 entry to Keys
What you can ask later
- “Which keys haven’t been rotated in 90 days?”
- “What breaks if we rotate the OpenAI key?”
- “Who owns the Sentry account?”
- “Which services did Ali own before he moved teams?”
Who can see what
- Engineers read the inventory.
- Each owner can be limited to editing the entries where Owner is their name.
- Security edits every entry, and is the only team that can change Rotated.
- An audit agent reads the inventory to flag stale keys, and writes nothing.
How it compares with a secret manager or a spreadsheet
A secret manager like Vault or 1Password is where the secrets belong, with rotation, access policies and audit logs.
The map around the secrets is what ADoor keeps: who owns each key, what uses it and when it was rotated, so you know what breaks before you rotate.
How to start
- Connect ADoor to your assistant. ChatGPT, Claude, Grok and Cursor all connect through MCP.
- Tell it: “Set up a service inventory: Keys (service, environment, owner, used by, stored at, last rotated) and Services.”
- Give engineers read access, and limit each owner to editing the entries where Owner is their name.
Questions people ask
Should I store secrets in ADoor?
No. Store them in your secret manager and record where they are.
Can it remind us to rotate?
ADoor doesn’t send notifications. A weekly scheduled task in ChatGPT or Claude, or a CI job, can list keys older than 90 days.
What does it cost?
Nothing on the free plan, which holds 3 tables and 100 rows. Pro is $10 a month per workspace, with 1 GB of storage and no per-GB charges.
Can I export everything?
Yes, as CSV or JSON, whenever you want. Ask your assistant for the export or download it yourself.
Related
- Start an asset and equipment register
- Keep feature flags and config agents can read
- Keep an incident log
- ADoor vs Notion
- ADoor vs Airtable
- All use cases
Updated October 20, 2026.