Secure CLI tool for managing secrets in a private GitHub/Gitlab repository with client-side encryption. uses Argon2id and AES-256-GCM to protect your secrets.
A secure, cross-platform, always-free, and open-source alternative to 1password, bitwarden, etc., Password and API key manager for folks who live in the command line. (CLI + TUI)
Encrypt secrets inline in your config and .env files with ENC[…] markers — local keypair or GCP/AWS/Azure KMS. Safe to commit. Ships a setup skill for AI coding agents.
Secrets that refuse to be stolen. Sealed API keys that decrypt only on your allowlisted repo — and raise a security error if anything tries to print, iterate, or read them. Every access attempt alerts the owner.
A local MITM proxy between AI coding agents and their APIs: it masks secrets found in outbound prompts with shape-preserving surrogates and restores them in the response. Go, runs entirely on your machine.