Molecule.dev

← All templates

Secrets Manager

Developer Tools · React + Node (Express) · 17 @molecule/* packages

Vault-like secrets management with encrypted key-value storage, rotation policies, and access control — with built-in Stripe-backed subscription tiers

Open in Molecule

What is inside

  • auth
  • search
  • subscriptions

Screens (16)

  • Landing /
  • Login /login
  • Signup /signup
  • ForgotPassword /forgot-password
  • ResetPassword /reset-password
  • Vaults /vaults (signed in)
  • VaultDetail /vaults/:id (signed in)
  • SecretDetail /secrets/:id (signed in)
  • AuditLog /audit (signed in)
  • Settings /settings (signed in)
  • Rotations /rotations (signed in)
  • Integrations /integrations (signed in)
  • Team /team (signed in)
  • ApiTokens /tokens (signed in)
  • Notifications /notifications (signed in)
  • Profile /profile (signed in)

Data model (11 tables)

  • access_policies — id, user_id, vault_id, name, path_pattern, permissions, allowed_environments, expires_at, …
  • api_tokens — id, user_id, name, token_hash, scopes, expires_at, last_used_at, revoked_at, …
  • audit_log — id, actor, action, resource, resource_id, details, ip, user_agent, …
  • devices — id, createdAt, updatedAt, userId, name, pushPlatform, pushSubscription, hasPushSubscription
  • integrations — id, user_id, name, category, config, status, last_sync, created_at, …
  • notifications — id, user_id, kind, title, body, read_at, data, created_at, …
  • rotations — id, user_id, secret_id, scheduled_at, completed_at, status, by_actor, mode, …
  • secret_versions — id, user_id, secret_id, version, value, comment, created_by, created_at, …
  • secrets — id, user_id, vault_id, name, key, path, kind, value, …
  • team_members — id, user_id, member_id, email, role, status, sso_group, vaults, …
  • vaults — id, user_id, slug, name, description, environment, color, compliance, …

API (9 handlers)

  • access-policies api/src/handlers/access-policies.ts
  • api-tokens api/src/handlers/api-tokens.ts
  • audit-log api/src/handlers/audit-log.ts
  • integrations api/src/handlers/integrations.ts
  • notifications api/src/handlers/notifications.ts
  • rotations api/src/handlers/rotations.ts
  • secrets api/src/handlers/secrets.ts
  • team-members api/src/handlers/team-members.ts
  • vaults api/src/handlers/vaults.ts

Subscription tiers

free / pro / team — gated by: maxAccessPolicies, maxAuditLog, maxSecrets, advancedFeatures, canExport, retentionDays

Built from 17 @molecule/* packages

Browse all @molecule/* packages →

Required secrets

  • DATABASE_URL PostgreSQL connection string
  • ENCRYPTION_KEY Master encryption key for secrets

The @molecule/* packages are Apache-2.0. The app you build from this template is yours to export and self-host. Licensing