# Auth Secret

> Generate cryptographically secure auth secrets in the browser. Choose byte length and encoding, or use the public REST API and MCP server.

Canonical site: https://www.auth-secret.com
Made by: Egger & Co (https://www.eggerco.com/)

## Product
- Browser generator at https://www.auth-secret.com (secrets never leave the device)
- REST API: GET/POST https://www.auth-secret.com/api/v1/secret (alias https://www.auth-secret.com/api), 60 req/min per IP
- OpenAPI: https://www.auth-secret.com/api/v1/openapi.json
- MCP: https://www.auth-secret.com/api/mcp, 60 req/min per IP
- CLI: npx auth-secret

## Framework URLs
- https://www.auth-secret.com/session
- https://www.auth-secret.com/jwt
- https://www.auth-secret.com/laravel
- https://www.auth-secret.com/django
- https://www.auth-secret.com/rails
- https://www.auth-secret.com/betterauth
- https://www.auth-secret.com/authjs
- https://www.auth-secret.com/nextauth

## Secret defaults
- Default: 32 bytes, base64 (openssl rand -base64 32)
- Presets: Generic, Session, JWT, Laravel, Django, Rails, Better Auth, Auth.js, NextAuth
- Lengths: 16, 24, 32, 48, 64, 128 bytes (custom 8–256)
- Encodings: base64, base64url, hex
- Batch: 1–20 secrets
- Laravel APP_KEY is prefixed with base64:

## REST example
GET https://www.auth-secret.com/api/v1/secret?bytes=32&encoding=base64&count=1
GET https://www.auth-secret.com/api/v1/secret?output=text

## CLI example
npx auth-secret
npx auth-secret --bytes 32 --encoding base64
npx auth-secret --env AUTH_SECRET

## MCP
Public Streamable HTTP MCP server. Tool: generate_secret(bytes, encoding, count).