offprompt vs Doppler

Q: Does Doppler write a .env file an agent could read?

Not by default: doppler run injects the secrets as environment variables into the process it runs, with no file on disk. offprompt does write a file, the project’s .env.local, because that is where the project reads the key. offprompt does not stop an agent that can read files from opening it, so close the agent’s file tools to it: a deny rule in Claude Code, .cursorignore in Cursor.

Doppler is a secrets manager. You keep a project's secrets in one place, and Doppler syncs them to every environment and injects them at runtime, so no one copies a value between a .env and a dashboard. offprompt is for the step before a secret has a home: a coding agent hits a task that needs a key the project does not have, and instead of asking for it in the chat, it asks offprompt, which opens a page in your browser for you to type the key.

They answer different problems, and they work well in the same project.

At a glance

Question	offprompt	Doppler
What it is	An MCP server the agent calls to ask you for a value it lacks, which it writes into the project	A hosted secrets manager that keeps a team's secrets in one place and syncs them to every environment
How a value gets in	You type or paste it on a page served from `127.0.0.1`. The agent never handles it	You add it in the dashboard, the CLI or the API. A new value does not come from the task at hand
Where values live	In the project's `.env`, `.env.local` or another file the agent names	In Doppler's cloud, synced out to each environment and the services you connect
How code reads a value	From the file, as `process.env.NAME`	`doppler run -- <cmd>` injects the secrets as environment variables at runtime, with no `.env` on disk
Keeps a value out of the agent's context	Yes. Results carry the key names, the file and a four-emoji fingerprint, never values	Not its aim. Its guidance for agents is a scoped, read-only, expiring credential per agent, so an agent reads only what you grant
Checks a key's format	Yes, for 65 providers and 111 kinds of key, such as a prefix and a length, plus 12 formats	Not documented for particular providers
From a cloud sandbox	Yes. A link through a Cloudflare quick tunnel, with values encrypted in your browser to a key only the sandbox holds	The CLI or the MCP server runs wherever you give it a Doppler token
For AI agents	The whole tool: an agent asks, you type, the value lands in the file	An official MCP server, marked experimental, that lets an agent work with the Doppler API, with a read-only mode
Account needed	None	A Doppler account, with a service token for automation
License and price	MIT, free	The CLI is Apache-2.0. The platform is a hosted service: free for three users, then paid

What each tool's own docs say, as of 9 November 2026. “Not documented” means its docs do not say.

What Doppler is best at

Doppler is a single source of truth for the secrets a team already has. You organise them by project and environment, and the doppler run -- <command> CLI injects them as environment variables into the process it starts, so a service reads its config with no .env written to disk.

Around that it does the work a store does: it syncs secrets out to the services you already use, such as Vercel, AWS Secrets Manager and GitHub Actions; it fires webhooks when a value changes; and on its paid plans it rotates secrets and, on Enterprise, issues short-lived dynamic secrets. If your problem is keeping one set of secrets consistent across machines, people and environments, that is what Doppler is for.

When to pick Doppler

Reach for Doppler, not offprompt, when:

a team shares secrets and you want one place to hold, change and audit them;
you want secrets injected at runtime rather than written to a file;
you need the same values synced to Vercel, AWS, a CI runner or another service;
you want rotation, versioning or dynamic, short-lived credentials.

offprompt does none of these. It does not store, sync, rotate or audit; once the value is in the file, it is done.

Where offprompt fits

offprompt covers the moment a key does not exist in any store yet, when a coding agent would otherwise ask for it in the chat. The agent calls offprompt's collect_secret with the key's name, why it needs it and the file it goes in; offprompt opens its page on 127.0.0.1, you type the key, and it writes the file and answers the agent with the key's name and a four-emoji fingerprint. The value is never in a prompt, a tool argument or a tool result.

From a cloud sandbox, such as Claude Code on the web or Codex cloud, the agent passes you a link through a Cloudflare quick tunnel; your browser encrypts the value to a key only the sandbox holds, so the sandbox needs no Doppler token and the tunnel carries only ciphertext.

Its limit is plain: offprompt writes the key to .env.local, and it does not stop an agent that can read files from opening that file. Every result tells the agent not to and lists the keys the file holds; to be sure, close the agent's file tools to it with a deny rule in Claude Code or .cursorignore in Cursor.

Using them together

The two chain in either direction. Capture a new key with offprompt so its value never touches the chat, then add it to Doppler to share and rotate it across the team. Or start from Doppler: its CLI writes the values you already keep to a file on your laptop, which you drop on offprompt's page.

On your laptop

doppler secrets download --no-file --format=env > /tmp/secrets.env
# drop /tmp/secrets.env on offprompt's page; it takes only the keys the agent asked for

offprompt's page reads that file and keeps only the keys the agent requested, so a sandbox holds no Doppler credential. See Values you already keep.

Doppler's own advice for agents is a scoped, read-only, expiring credential per agent. offprompt and that advice point the same way: an agent should touch a secret as narrowly as the task allows, and never carry its value in the conversation.

Sources

What Doppler's own docs say, as of 9 November 2026.

Something here out of date? Open an issue on GitHub.

FAQ

Is offprompt an alternative to Doppler?

No. Doppler is where a team keeps its secrets and syncs them to every environment; offprompt keeps no store and syncs nothing. offprompt is for one moment: a task needs a key the project does not have yet, and rather than paste it into the chat, the agent asks for it, you type it on a page in your browser, and it is written to the file. Once a key exists, Doppler is a good place to put it.

Can I use offprompt and Doppler together?

Yes, and that is the intended shape. Use offprompt when a key first appears, so its value never enters the chat, then add it to Doppler to share and rotate across the team. The other way round, doppler secrets download writes a file on your laptop that you drop on offprompt’s page, which takes only the keys the agent asked for, so a sandbox need never hold a Doppler token.

Does Doppler's MCP server keep secret values out of the agent's context?

Doppler ships an official MCP server, which it marks experimental, that lets an agent work with the Doppler API, and it has a read-only mode. Doppler’s own guidance for agents is to give each agent a scoped, read-only, expiring credential. offprompt answers a narrower question: when the value does not exist in any store yet, it gets it from you into the file without the agent handling it at all.

Does Doppler write a .env file an agent could read?

Not by default: doppler run injects the secrets as environment variables into the process it runs, with no file on disk. offprompt does write a file, the project’s .env.local, because that is where the project reads the key. offprompt does not stop an agent that can read files from opening it, so close the agent’s file tools to it: a deny rule in Claude Code, .cursorignore in Cursor.

Do I need an account to use offprompt?

No. offprompt runs on your machine as a process the agent starts, keeps nothing once the value is written, and has no server of ours to sign in to. Doppler is a hosted service that needs an account and, for automation, a service token. offprompt is open source under the MIT license; npx offprompt init sets it up.

Try it

In a project's folder, run the command below, then ask the agent for something that needs a key. The agent calls offprompt when it reaches the step that needs one.

$npx offprompt init

Other comparisons

offprompt vs HashiCorp VaultVault is identity-based secrets infrastructure that issues short-lived credentials to services. offprompt is the small step before that: getting a key a coding agent needs into the project without the chat.
offprompt vs InfisicalInfisical is an open-source secrets platform with a dashboard, a CLI and an MCP server. offprompt keeps no store; it gets a key the agent lacks into the project’s file without the value entering the chat.
offprompt vs 1Password1Password keeps your team’s secrets in a vault and injects them into commands with op run, never writing them to disk. offprompt captures a new key an agent needs without the value reaching the chat.

Or the three-way look at the MCP servers: offprompt vs 1Password Environments MCP vs Infisical MCP.