Plugins Overview

Plugins allow extending the functionality of Varlock. Most load secrets from an external source (password managers, secrets platforms, cloud secret stores), but plugins can also extend other parts of varlock, such as adding request-transform schemes to the credential proxy. See the plugins guide for more details on using plugins.

The plugins listed below are the official ones, published under the @varlock npm scope. Third-party plugins are also supported. You can load them from npm or from a local path. See the plugins guide for more information. Loading plugins from other sources (git, http, jsr) is not supported yet.

Password managers

1Password @varlock/1password-plugin

Bitwarden @varlock/bitwarden-plugin

Dashlane @varlock/dashlane-plugin

Keeper @varlock/keeper-plugin

KeePass @varlock/keepass-plugin

Pass @varlock/pass-plugin

Passbolt @varlock/passbolt-plugin

Proton Pass @varlock/proton-pass-plugin

macOS Keychain Built-in (no npm package)

Secrets platforms

Doppler @varlock/doppler-plugin

Infisical @varlock/infisical-plugin

HashiCorp Vault @varlock/hashicorp-vault-plugin

Akeyless @varlock/akeyless-plugin

Cloud secret stores

AWS SSM/SM @varlock/aws-secrets-plugin

Azure Key Vault @varlock/azure-key-vault-plugin

GCP Secret Manager @varlock/google-secret-manager-plugin

Infrastructure

Kubernetes @varlock/kubernetes-plugin

Credential proxy

These plugins extend the credential proxy rather than loading secrets:

AWS SigV4 signing @varlock/aws-sigv4-plugin

Package reference

Plugin	npm package
1Password
Akeyless
AWS (Secrets Manager & Parameter Store)
AWS SigV4 signing (credential proxy; AWS and S3-compatible)
Azure Key Vault
Bitwarden
Dashlane
Doppler
Google Secrets Manager
HashiCorp Vault (and OpenBao)
Infisical
KeePass
Keeper
Kubernetes (Secrets & ConfigMaps)
macOS Keychain	N/A - built-in
Pass (unix password manager)
Passbolt
Proton Pass