# Coldrune

> Open-source secret management tool. Single binary, embedded SQLite, AES-256-GCM encryption, multi-tenant, passwordless auth. CLI + REST API + MCP server for AI agents. Self-hosted alternative to HashiCorp Vault.

## Guides
- [Quickstart](https://docs.coldrune.com/guides/quickstart/): Download, configure, and store your first secret
- [Authentication](https://docs.coldrune.com/guides/authentication/): Magic link login, sessions, API key auth
- [Organizations](https://docs.coldrune.com/guides/organizations/): Create orgs, invite members, manage roles
- [Secrets](https://docs.coldrune.com/guides/secrets/): Set, get, list, delete, import, export, and inject secrets
- [Access Control](https://docs.coldrune.com/guides/access-control/): Deny-by-default ACL with glob patterns
- [Service Accounts](https://docs.coldrune.com/guides/service-accounts/): API keys for CI/CD and automation
- [Configuration](https://docs.coldrune.com/guides/configuration/): coldrune.yml and environment variables

## AI Agents
- [MCP Server](https://docs.coldrune.com/agents/mcp-server/): Install and configure the Coldrune MCP server
- [MCP Tools Reference](https://docs.coldrune.com/agents/mcp-tools/): All 15 MCP tools with parameters
- [llms.txt & AGENTS.md](https://docs.coldrune.com/agents/llms-txt/): Machine-readable docs and project templates

## Reference
- [REST API](https://docs.coldrune.com/reference/api/): Complete HTTP API reference with all endpoints, request bodies, and responses

## Self-Hosting
- [Server Configuration](https://docs.coldrune.com/self-hosting/configuration/): Full environment variable reference
- [Deployment](https://docs.coldrune.com/self-hosting/deployment/): systemd, nginx, and Caddy setup
- [Encryption](https://docs.coldrune.com/self-hosting/encryption/): Key hierarchy and rotation
- [Backups](https://docs.coldrune.com/self-hosting/backups/): Encrypted S3 backups and restore
- [Architecture](https://docs.coldrune.com/self-hosting/architecture/): Data model and system components

## Optional
- [Projects & Environments](https://docs.coldrune.com/guides/projects/): Organize secrets into projects and environments
- [Audit Logs](https://docs.coldrune.com/guides/audit-logs/): Query the audit trail
- [Installation](https://docs.coldrune.com/self-hosting/installation/): Download and install the binary