Is Toknbase an AI agent or a secrets manager?

Both — the vault is the engine, the agent is the product. Toknbase is an AI SecOps agent that actively scans repos, fixes exposed secrets, opens PRs, verifies every fix, and logs each action with a tamper-evident on-chain receipt. The vault stores secrets with zero-knowledge encryption so even the agent cannot read the values it protects.

What can the AI SecOps agent do?

The agent scans public and private GitHub repos for exposed credentials, monitors continuously on every new commit, proposes fix PRs to replace hardcoded secrets with secure runtime calls, verifies fixes are gone after application, checks whether found credentials have appeared in known breach databases, and sends a weekly CISO briefing with your full security posture. Every action is logged on-chain with a cryptographic receipt.

Can Toknbase — or its employees — read my secrets?

No. Client-side encryption means we store only ciphertext. We never have your encryption key. Even a Toknbase engineer with direct canister access would only see encrypted bytes. This is a cryptographic guarantee, not a policy promise.

How do I use Toknbase with AI agents like Claude or Cursor?

Toknbase provides a hosted MCP (Model Context Protocol) endpoint at https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp. Add it to your Claude Desktop, Cursor, or Windsurf config as a JSON block — no installation, no npm package, no local server required.

What is the pricing for Toknbase?

Toknbase offers three plans: Free ($0 — 1 seat, 50 secrets, 3 scans/month, free forever), Pro ($19.99/seat/month or $15.99/seat/month billed annually — unlimited seats, private repo scanning, AI auto-remediation, full MCP endpoint, pre-commit hook), and Enterprise ($499.99/month flat — everything in Pro plus SSO/SAML, custom detectors, dedicated support, DPA, and 99.9% SLA). Annual billing saves 20% on Pro.

Can I change plans at any time?

Yes — upgrade, downgrade, or cancel at any time. Upgrades take effect immediately. Downgrades apply at the next billing cycle.

Is there a free trial?

The Free plan is free forever and includes public repo scanning and an on-chain audit trail — no credit card required. Pro and Enterprise plans can be started immediately with a paid subscription.

How does Toknbase compare to Doppler or HashiCorp Vault?

Three key differences: (1) It's an AI agent, not a passive vault — it actively watches repos, finds leaks, and opens fix PRs without being asked. (2) Zero-knowledge encryption — Toknbase cryptographically cannot read your secrets, even under subpoena. (3) On-chain audit trail — every agent action has a tamper-evident cryptographic receipt. No other secrets management tool provides all three.

How is Toknbase different from using .env files?

.env files store secrets on disk in plaintext and are frequently committed to version control by accident. Toknbase encrypts secrets in your browser before they leave your device, stores only ciphertext, actively scans your repos for accidentally exposed values, and can automatically open a fix PR when it finds one. It's a proactive agent, not a static file.

Can Toknbase scan private GitHub repos?

Yes. Public repos can be scanned instantly with no signup. To scan private repos, connect your GitHub account via OAuth — Toknbase requests the minimum required permissions and uses a short-lived access token. Private repo scanning is included in the Pro plan.

What happens if a secret is exposed in an old commit?

Removing a secret from a file does not remove it from git history — anyone with access to the repository can still find it in old commits. Toknbase scans git history for exposed secrets, not just the current state of the code. When it finds one, it flags it as a historical exposure and recommends rotating the credential immediately, since it must be treated as compromised.

OUR CONVICTION

We believe your secrets manager should bemathematically incapableof reading your secrets.

Every secrets manager we looked at asked us to trust them. Trust that they encrypt at rest. Trust that their employees won't look. Trust that they'll patch the next vulnerability before it's exploited. We decided that trust alone isn't good enough for the most sensitive data in your stack.

Toknbase encrypts your secrets in your browser before they leave your device — using HKDF+AES-256-GCM client-side encryption, not from anything we control. We cannot read your secrets. Nobody on our team can. Not even if compelled.

WHAT WE BUILT

Built on the Internet Computer.

TheInternet Computeris a decentralized blockchain network that runs smart contracts at web speed — giving Toknbase a verifiable, tamper-resistant runtime that no single company controls. Your encrypted secrets live in a canister smart contract, not in a startup's S3 bucket.

Every access is recorded in atamper-evident hash chain audit log— cryptographically verifiable, permanent, and on-chain. Encryption usesHKDF+AES-256-GCMclient-side key derivation — keys are derived from your identity and never leave your browser.

Read the security model

HOW IT STARTED

Built because the tools didn't exist.

Toknbase was built by a single fraud analyst watching cybersecurity transform in real time. As AI reshaped the threat landscape, the attack surface for infrastructure secrets expanded faster than the tools to protect them.

The platforms in the market were built for the previous era — key-per-developer, trust-but-verify, human-only access. Toknbase exists because that era ended.

OUR MISSION

“Toknbase exists to make zero-trust infrastructure the default, not the exception.”

WHAT WE BELIEVE

Four principles. No exceptions.

Radical transparency

We publish exactly what we can and cannot see. That's the product.

Zero trust by default

Trust is never assumed. Every access is explicit, scoped, and auditable.

Built for the AI era

Secrets management was designed for humans. We rebuilt it for agents too.

Constraint as craft

We remove features that create false trust. Fewer promises, all of them kept.

BUILT IN PUBLIC

Open infrastructure. Verifiable trust.

Toknbase runs on theInternet Computer— a decentralized blockchain network where smart contracts run at web speed. Your encrypted secrets live in a canister with a public, verifiable ID. Anyone can inspect the canister's certified state, verify the audit chain, and confirm no single company controls the infrastructure.

We build in public and ship continuously. The product is the proof.

View canister on Internet Computer Dashboard

Zero trust. No exceptions.

Free plan available. No credit card required.

Read the security model →