cerberus-python-client
A python client for interacting with Cerberus
Decision gist · record as of 2026-08-14
No, unless you are already deeply committed to Cerberus infrastructure. The project is archived and abandoned (last commit 2023-03-27), creating significant risk of incompatibility with modern Python and dependency versions. No known security vulnerabilities exist, but lack of maintenance means future vulnerabilities may go unpatched. Install only if Cerberus is your organization's active secrets platform.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires a running Cerberus server instance and appropriate AWS IAM credentials or username/password for authentication.
- Low install friction with only two runtime dependencies (boto3 and requests).
- However, the project is archived and abandoned, with no commits since 2023-03-27.
License · maintenance · safety
Apache License, v2.0 (permissive) — Licensed under Apache License, v2.0 (permissive), which allows commercial and private use with minimal restrictions. No licensing barriers to adoption.
last release 2022-10-06 (1408 days) · last repo commit 2023-03-27 · 13 stars · archived
0 known vulnerabilities (OSV.dev, 2026-08-14) · 827,006 downloads/mo, #4,960 on PyPI
Alternatives
Verify before relying
pip install cerberus-python-client
from cerberus.client import CerberusClient
client = CerberusClient('https://my.cerberus.url')
secret = client.get_secrets_data('app/path/to/secret')- Current compatibility with modern Python versions and boto3/requests releases given abandonment status
- Whether the Cerberus service itself is still actively maintained by Nike or has been deprecated
- Support status for write operations mentioned as 'not yet implemented' in the description
What it is and what it does
Cerberus Python Client is a library for communicating with Cerberus, Nike's secrets management platform. It provides read-only access to secrets stored in Cerberus safe deposit boxes, supporting multiple authentication schemes including AWS IAM roles (for local, EC2, ECS, and Lambda environments), user credentials, and assumed roles via boto3 sessions. The client also supports file operations (upload, download, list, delete) and management functions like viewing roles and categories.
The library depends on boto3 for AWS credential handling and requests for HTTPS communication. The project is archived and has not been maintained since 2023-03-27, meaning it may not be compatible with recent versions of its dependencies or Python itself.
Use it for
- Retrieve database credentials and API keys from Cerberus for use in AWS Lambda, EC2, or ECS applications
- Access application secrets in a centralized vault during local development or CI/CD pipelines using IAM role authentication
- Download and upload configuration files and certificates to Cerberus safe deposit boxes
- List available secret versions and retrieve historical versions for auditing or rollback purposes
- Manage role-based access control by querying available roles and categories in Cerberus
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
No, unless you are already deeply committed to Cerberus infrastructure.
The project is archived and abandoned (last commit 2023-03-27), creating significant risk of incompatibility with modern Python and dependency versions. No known security vulnerabilities exist, but lack of maintenance means future vulnerabilities may go unpatched. Install only if Cerberus is your organization's active secrets platform.
Install
cerberus-python-client on PyPI
Before you install
Low install friction with only two runtime dependencies (boto3 and requests). However, the project is archived and abandoned, with no commits since 2023-03-27. Use only if already committed to Cerberus infrastructure.
Requires a running Cerberus server instance and appropriate AWS IAM credentials or username/password for authentication.
License in practice
Licensed under Apache License, v2.0 (permissive), which allows commercial and private use with minimal restrictions. No licensing barriers to adoption.
Quickstart
pip install cerberus-python-client
from cerberus.client import CerberusClient
client = CerberusClient('https://my.cerberus.url')
secret = client.get_secrets_data('app/path/to/secret')Verify before relying
- Current compatibility with modern Python versions and boto3/requests releases given abandonment status
- Whether the Cerberus service itself is still actively maintained by Nike or has been deprecated
- Support status for write operations mentioned as 'not yet implemented' in the description
Package facts
| License | Apache License, v2.0 permissive |
| Python support | Not specified |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 2 packagesboto3requests |
| Maintenance | Abandoned 1,408 days since the last release |
| Last repo commit | repository archived |
| First released | |
| Downloads | 827,006 / month, #4,960 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
Evidence: cerberus_python_client-2.5.4-py2.py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “cerberus python client”
- cerberus-python-clientA Python client library for reading and writing secrets to Cerberus,…
- CerberusCerberus validates Python dictionaries and documents against a…
- codewords-clientA Python client library for the Codewords API with built-in FastAPI…
Give your agent the search over MCP, or paste the wish link into any chat.
More Security packages
Provides Python bindings to the FreeDesktop.org Secret Service API for securely storing and retrieving passwords and secrets through GNOME Keyring, KWallet, or KeePassXC.
MSAL for Python handles OAuth2 and OpenID Connect authentication with Microsoft identity services, managing token acquisition, caching, and refresh for applications integrating with Microsoft Entra ID, Microsoft Accounts, and Azure AD B2C.
joserfc implements JOSE standards (JWS, JWE, JWK, JWT, and related RFCs) for signing, encrypting, and managing JSON-based cryptographic tokens in Python.
Authlib provides a complete implementation of OAuth 1.0, OAuth 2.0, and OpenID Connect 1.0 for building both authentication clients and servers, with built-in support for JWS, JWK, JWA, and JWT standards.
Provides low-level CFFI bindings to the official Argon2 password hashing algorithm for use by libraries and applications that need direct access to Argon2 without higher-level abstractions.
ADAL for Python authenticates applications with Azure Active Directory to obtain tokens for accessing Azure AD-protected resources.
Install only if maintaining existing code that already depends on it, and plan a migration.
See also ibm-secrets-manager-sdk · azure-keyvault-secrets · aws-cdk.aws-secretsmanager · aws-secretsmanager-caching · infisical-python · Cerberus · python-barbicanclient · aws-cdk.aws-iam · credstash · onepassword