OpenA2A: CLI · HackMyAgent · Secretless · AIM · Browser Guard · DVAA

secretless-ai

Keep API keys and secrets invisible to AI coding tools. Works with Claude Code, Cursor, GitHub Copilot, Windsurf, Cline, and Aider.

Quick Start

npx secretless-ai init

  Detected:  Claude Code, Cursor
  Protected: .env, .aws/credentials, *.key, *.pem (21 file patterns)
  Blocked:   49 credential patterns from AI context
  Done.      Secrets are now invisible to AI tools.

For a full security dashboard covering credentials, shadow AI, config integrity, and more:

npx opena2a-cli review

MCP Server Protection

Every MCP server config has plaintext API keys in JSON files on your machine. The LLM sees them. Secretless encrypts them.

npx secretless-ai protect-mcp

  Scanned 1 client(s)

  + claude-desktop/browserbase
      BROWSERBASE_API_KEY (encrypted)
  + claude-desktop/github
      GITHUB_PERSONAL_ACCESS_TOKEN (encrypted)
  + claude-desktop/stripe
      STRIPE_SECRET_KEY (encrypted)

  3 secret(s) encrypted across 3 server(s).
  MCP servers start normally -- no workflow changes needed.

Scans configs across Claude Desktop, Cursor, Claude Code, VS Code, and Windsurf. Secrets move to your configured backend. Non-secret env vars (URLs, regions) stay untouched.

npx secretless-ai protect-mcp --backend 1password  # Store MCP secrets in 1Password
npx secretless-ai mcp-status                       # Show which servers are protected
npx secretless-ai mcp-unprotect                    # Restore original configs from backup

How It Works

1. Scans your project for hardcoded credentials in config files and source code (49 patterns across .js, .ts, .py, .go, .java, .rb, and more)
2. Migrates them to secure storage (OS keychain, 1Password, Vault, GCP Secret Manager)
3. Blocks AI tools from reading credential files (21 file patterns)
4. Brokers access through environment variables -- secrets never enter AI context

Use Cases

Step-by-step guides for common workflows: docs/USE-CASES.md

• Protect My Credentials -- Keep API keys out of AI tools (2 min)
• Secure MCP Configs -- Encrypt MCP server credentials (3 min)
• Team Setup -- Shared backend, CI/CD, onboarding (5 min)
• Migrate from .env -- Move .env files to encrypted storage (3 min)

Supported Tools

| Tool | Protection Method | |------|------------------| | Claude Code | PreToolUse hook (blocks reads before they happen) + deny rules + CLAUDE.md | | Cursor | .cursorrules instructions | | GitHub Copilot | .github/copilot-instructions.md instructions | | Windsurf | .windsurfrules instructions | | Cline | .clinerules instructions | | Aider | .aiderignore file patterns |

Claude Code gets the strongest protection because it supports hooks -- a shell script runs before every file read and blocks access at the tool level.

Storage Backends

| Backend | Storage | Best For | |---------|---------|----------| | local | AES-256-GCM encrypted file | Quick start, single machine | | keychain | macOS Keychain / Linux Secret Service | Native OS integration | | 1password | 1Password vault | Teams, CI/CD, multi-device | | vault | HashiCorp Vault KV v2 | Enterprise, self-hosted | | gcp-sm | GCP Secret Manager | GCP-native workloads |

npx secretless-ai backend set 1password              # Switch backend
npx secretless-ai migrate --from local --to 1password # Migrate existing secrets

NanoMind Integration

Optional integration with NanoMind for enhanced security analysis:

npm install @nanomind/guard @nanomind/engine  # Optional

• MCP injection screening: protect-mcp screens env var values for prompt injection patterns and warns when suspicious content is detected
• Rich scan explanations: scan --explain generates context-aware security explanations for each finding using NanoMind's local inference engine

Both features gracefully degrade when NanoMind packages are not installed.

Using with opena2a-cli

opena2a-cli unifies all OpenA2A security tools:

npm install -g opena2a-cli
opena2a review          # Full security dashboard
opena2a secrets init    # Initialize secretless protection

Development

npm run build && npm test    # 809 tests

License

Apache-2.0

Part of the OpenA2A ecosystem. Full reference: opena2a.org/docs/secretless