Skip to main content
Warning: You are using the test version of PyPI. This is a pre-production deployment of Warehouse. Changes made here affect the production instance of TestPyPI (
Help us improve Python packaging - Donate today!

A service to manage, retrieve and store secrets

Project Description


A tool for managing secrets.

Custodia is a project that aims to define an API for modern cloud applications that allows to easily store and share passwords, tokens, certificates and any other secret in a way that keeps data secure, manageable and auditable.

The Custodia project offers example implementations of clear text and encrypted backends, and aims to soon provide drivers to store data in external data stores like the Vault Project, OpenStack’s Barbican, FreeIPA’s Vault and similar.

In future the Custodia project plans to enhance and enrich the API to provide access to even more secure means of dealing with private keys, like HSM as a Service and other similar security systems.

See the Custodia documentation for more information:



  • configparser (Python 2.7)
  • cryptography
  • jwcrypto >= 0.2
  • requests
  • six

Installation and testing

  • pip
  • setuptools >= 18.0
  • tox >= 2.3.1
  • wheel

API stability

Some APIs are provisional and may change in the future.

  • Command line interface in module custodia.cli.
  • The script custodia-cli.
Release History

Release History

This version
History Node


Supported By

WebFaction WebFaction Technical Writing Elastic Elastic Search Pingdom Pingdom Monitoring Dyn Dyn DNS Sentry Sentry Error Logging CloudAMQP CloudAMQP RabbitMQ Heroku Heroku PaaS Kabu Creative Kabu Creative UX & Design Fastly Fastly CDN DigiCert DigiCert EV Certificate Rackspace Rackspace Cloud Servers DreamHost DreamHost Log Hosting