Use an API without holding its keys.

Gatekeeper sits between your apps and third-party APIs. Provider credentials stay on this server, encrypted; people sign in to Gatekeeper and call only the providers an admin granted them.

1. An admin stores a provider's credential once. It is encrypted with AES-256-GCM and never shown again, not even to admins.
2. The admin grants that provider to specific people. Every admin action, even listing members, needs a code from their authenticator app.
3. You call the provider through Gatekeeper. It checks your grant on every request and adds the credential on the server side, so it never reaches your browser or your code.

How it is built Source code