diff --git a/data/plugins/opencode-secrets-env.yaml b/data/plugins/opencode-secrets-env.yaml
new file mode 100644
index 0000000..86d20c4
--- /dev/null
+++ b/data/plugins/opencode-secrets-env.yaml
@@ -0,0 +1,10 @@
+name: Secrets Env
+repo: https://github.com/bytesnail/opencode-secrets-env
+tagline: Inject secrets from a dotenv file into process.env, hot-reload, reconnect MCP servers
+description: Loads secrets from ~/.config/opencode/secrets.env (dotenv format) into process.env at startup, so MCP servers ({env:NAME} references), other plugins, and OpenCode's own provider-key discovery can use them — keeping keys out of opencode.json(c) and your config safe to commit. Watches the file and hot-reloads changes in about a second, then reconnects only the MCP servers that reference a changed variable. Works with both OpenCode V1 (opencode-ai >= 1.14.34) and V2 (@opencode/cli).
+tags:
+  - secrets
+  - environment
+  - mcp
+min_version: "1.14.34"
+homepage: https://www.npmjs.com/package/opencode-secrets-env