TokenTap

TokenTap is a web app (with optional CLI) that manages, rotates, and audits credentials used in ETL tools and data pipelines. Most teams still hardcode long-lived tokens in Airflow variables, dbt profiles, GitHub secrets, or vendor UIs—then scramble during incidents, employee offboarding, or vendor token expirations. TokenTap centralizes secrets policies, schedules rotations, and automatically updates connected systems (Airflow, Dagster, Prefect, dbt Cloud, GitHub Actions, Snowflake, BigQuery, Databricks) via scoped integrations. It provides a “blast radius” view: which pipelines, jobs, and downstream datasets would fail if a secret changes. It also enforces least-privilege templates and produces audit-ready reports for SOC2/ISO. This is not a generic secrets manager; it’s narrowly built for data/ETL contexts where failures are expensive and ownership is messy across data engineering and security.