Is Toknbase an AI agent or a secrets manager?

Both — the vault is the engine, the agent is the product. Toknbase is an AI SecOps agent that actively scans repos, fixes exposed secrets, opens PRs, verifies every fix, and logs each action with a tamper-evident on-chain receipt. The vault stores secrets with zero-knowledge encryption so even the agent cannot read the values it protects.

What can the AI SecOps agent do?

The agent scans public and private GitHub repos for exposed credentials, monitors continuously on every new commit, proposes fix PRs to replace hardcoded secrets with secure runtime calls, verifies fixes are gone after application, checks whether found credentials have appeared in known breach databases, and sends a weekly CISO briefing with your full security posture. Every action is logged on-chain with a cryptographic receipt.

Can Toknbase — or its employees — read my secrets?

No. Client-side encryption means we store only ciphertext. We never have your encryption key. Even a Toknbase engineer with direct canister access would only see encrypted bytes. This is a cryptographic guarantee, not a policy promise.

How do I use Toknbase with AI agents like Claude or Cursor?

Toknbase provides a hosted MCP (Model Context Protocol) endpoint at https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp. Add it to your Claude Desktop, Cursor, or Windsurf config as a JSON block — no installation, no npm package, no local server required.

What is the pricing for Toknbase?

Toknbase offers three plans: Free ($0 — 1 seat, 50 secrets, 3 scans/month, free forever), Pro ($19.99/seat/month or $15.99/seat/month billed annually — unlimited seats, private repo scanning, AI auto-remediation, full MCP endpoint, pre-commit hook), and Enterprise ($499.99/month flat — everything in Pro plus SSO/SAML, custom detectors, dedicated support, DPA, and 99.9% SLA). Annual billing saves 20% on Pro.

Can I change plans at any time?

Yes — upgrade, downgrade, or cancel at any time. Upgrades take effect immediately. Downgrades apply at the next billing cycle.

Is there a free trial?

The Free plan is free forever and includes public repo scanning and an on-chain audit trail — no credit card required. Pro and Enterprise plans can be started immediately with a paid subscription.

How does Toknbase compare to Doppler or HashiCorp Vault?

Three key differences: (1) It's an AI agent, not a passive vault — it actively watches repos, finds leaks, and opens fix PRs without being asked. (2) Zero-knowledge encryption — Toknbase cryptographically cannot read your secrets, even under subpoena. (3) On-chain audit trail — every agent action has a tamper-evident cryptographic receipt. No other secrets management tool provides all three.

How is Toknbase different from using .env files?

.env files store secrets on disk in plaintext and are frequently committed to version control by accident. Toknbase encrypts secrets in your browser before they leave your device, stores only ciphertext, actively scans your repos for accidentally exposed values, and can automatically open a fix PR when it finds one. It's a proactive agent, not a static file.

Can Toknbase scan private GitHub repos?

Yes. Public repos can be scanned instantly with no signup. To scan private repos, connect your GitHub account via OAuth — Toknbase requests the minimum required permissions and uses a short-lived access token. Private repo scanning is included in the Pro plan.

What happens if a secret is exposed in an old commit?

Removing a secret from a file does not remove it from git history — anyone with access to the repository can still find it in old commits. Toknbase scans git history for exposed secrets, not just the current state of the code. When it finds one, it flags it as a historical exposure and recommends rotating the credential immediately, since it must be treated as compromised.

What is the Toknbase MCP endpoint?

The hosted MCP endpoint is https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp — no installation required. Pass your agent token in the Authorization header.

Why am I getting 'Unable to authenticate' when connecting the MCP server?

The Authorization header is missing from your config, your token has expired, or the token doesn't have MCP scope. Generate a new Service Identity token with MCP scope from your Tokens dashboard.

Do I need to self-host the MCP server?

No. The hosted endpoint is the standard and recommended approach. The local npm MCP server is a self-hosted advanced option — the hosted URL at https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp requires no installation.

MCP · INTEGRATION

The AI SecOps agent your AI agent can call

MCP (Model Context Protocol) is an open standard that lets AI assistants like Claude securely connect to your tools and data — including your Toknbase vault — so they can read secrets, trigger rotations, and run security checks on your behalf.

Connect Toknbase to Cursor, Claude, or other AI tools so they can scan and fix exposed secrets without leaving your editor.

Add one config block. Ask your AI assistant to find and fix exposed secrets — automatically, every action logged on-chain.

Used by security-conscious developers on the Internet Computer

Generate your token — it's free

1. Copy the config

Live

Paste this into your AI client's MCP settings and replaceYOUR_TOKENwith your agent token. The endpoint athttps://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcpis hosted on the Internet Computer — no install needed.

mcp-config.json

{
"mcpServers": {
"toknbase": {
"url":"https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp",
"headers": {
"Authorization":"Bearer YOUR_TOKEN"
 }
 }
 }
}

Your AI agent will return an auth error without a Bearer token — that's intentional. Generate yours below and paste it in.

2. Generate your token

Takes 30 seconds. Free, no credit card.

Generate token →

Three steps to your first agent action

Copy the config above into your AI client

Claude Desktop, Cursor, Windsurf, VS Code — any MCP-compatible editor.

Generate your free token at /tokens

Takes 30 seconds. Your token is the credential your AI agent uses to authenticate — shown once, store it safely.

Ask your AI agent:"Are there any exposed secrets in this project?"

Toknbase scans, finds exposures, and offers to rotate and remove them — all inside your editor.

Try the commands

command demo

Click a command chip or type one below. Every response is instant and deterministic — no LLM, no async delays.

/scan

Checks your code or a repo URL for exposed secrets and tells you what it found

/rotate

Replaces an exposed key with a new one automatically, then logs the action

/audit

Shows a full history of every security action taken in your vault

/secrets list

Lists all secrets stored in your vault (values stay hidden)

/secrets get [name]

Retrieves the value of a specific secret by name

Toknbase · Command Demosimulated · no real data

click or type below

Click a command above or type one below — results appear instantly, no LLM needed.

What your AI agent can do

A real conversation between Cursor and Toknbase — from detection to remediation in one session.

Cursor · Toknbase via MCP

>Are there any exposed secrets in this project?

Found 2 critical exposures.

• AWS_SECRET_KEY in .env — line 14

• STRIPE_SECRET_KEY in config/secrets.yml — line 8

Say 'fix these' to rotate and open a PR.

>Fix these.

Rotating AWS key… ✓ New key generated.

PR #47 opened — hardcoded key removed from .env.

New values delivered to your vault.

✓ Actions logged on-chain.

Editor Config

All configs below use thehosted HTTP endpoint— no npm install needed.

Paste the URL directly into your AI client's MCP server field. No config file or installation needed — the server runs on the Internet Computer.

No config file needed — paste URL directly into your agent

{
  "mcpServers": {
    "toknbase": {
      "type": "http",
      "url": "https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_AGENT_TOKEN"
      }
    }
  }
}

Where to get YOUR_AGENT_TOKEN

Dashboard → Tokens → Service Identities → Create new token → select MCP scope

What scope the token needs

Token must havefull_accessor MCP-enabled scope. Limited scope tokens fail silently.

If you see"Unable to authenticate"

The Authorization header is missing, the token has wrong scope, or the token is expired/revoked.

Agent Activity

last 50 entries

AGENT ACTIVITY

No agent activity yet

Make a request from your AI editor to see MCP tool calls and secret access events here.

What this MCP can do

Toknbase is zero-trust by design. Admin operations and plaintext value access are excluded from the MCP surface.

List secret names and metadata by folder

List all secrets and folders

Create and update secrets

Manage folders (full_access scope)

Rotate secrets (read_write or full_access scope)

Scoped read-only or read-write access

Delete secrets (read_write or full_access scope)

Manage team members

Access billing or plan settings

View audit log entries (all scopes)

Create or revoke agent tokens

Access other users' data

Setup

Test your connection

Verify your agent token works before configuring your editor

Where to get your agent token

1.Dashboard → Tokens → Service Identities
2.Click Create new token
3.Select MCP scope (or full_access for all tools)
4.Copy the agt_ token — shown only once

Verify Setup

After saving your MCP config and restarting your editor, confirm the connection is live by asking your AI assistant:

List my Toknbase secrets

Expected: secret names only, never values — zero-trust by design.

Note

Not working? Check that your agent token has at leastread_only scope and that your editor picked up the updated config (most editors require a restart or full window reload).

HTTP REST API

HTTP mode

Base URLhttps://4wj64-piaaa-aaaan-q5q7q-cai.icp0.ioICP HTTP gateway

Auth

Authorization: Bearer YOUR_AGENT_TOKEN

Pass your agent token in theAuthorizationheader on every request.

Method	Path	Description	Min scope
GET	`/api/secrets`	List secrets (names & metadata)	read_only
GET	`/api/folders`	List all folders	read_only
POST	`/api/secrets`	Create a new secret	read_write
PUT	`/api/secrets`	Update an existing secret	read_write
POST	`/api/folders/assign`	Assign a secret to a folder	full_access

Example: list secrets

curl -X GET \
"https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/api/secrets" \
 -H"Authorization: Bearer YOUR_AGENT_TOKEN" \
 -H"Content-Type: application/json"

Example: create a secret

curl -X POST \
"https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/api/secrets" \
 -H"Authorization: Bearer YOUR_AGENT_TOKEN" \
 -H"Content-Type: application/json" \
 -d '{"name":"STRIPE_KEY","value":"sk_live_..."}'

HTTP REST is thedefault transport — all calls route through these REST endpoints automatically.

Troubleshooting

Editor isn't picking up the MCP server

Fully restart your editor after adding the config — most editors only load MCP servers at startup.

Getting 'Unable to authenticate'

The Authorization header is missing, the token has the wrong scope, or the token is expired/revoked. Token needs full_access or MCP scope.

Getting a 403 Forbidden error

Your agent token exists but lacks the required scope. Check the 'Min scope' column in the tools table, then re-generate a token with the correct scope.

Canister appears offline or requests time out

ICP canisters occasionally have brief latency spikes. Retry after a few seconds. Canister ID: 4wj64-piaaa-aaaan-q5q7q-cai.

MCP tools not appearing in Cursor

Use Cmd+Shift+P → 'Reload Window'. The MCP server needs a full window reload to re-initialize.

Claude Desktop config not found

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json — Windows: %APPDATA%\Claude\claude_desktop_config.json

Available Tools

15 tools

Toknbase is zero-trust by design. Secrets with agent access enabled are returned as plaintext values — only secrets with agent access enabled are accessible.

Tool	Description	Min scope
`toknbase_list_secrets`	Browse secret names and metadata	read_only
`toknbase_create_secret`	Add a new secret to the vault	read_write
`toknbase_update_secret`	Modify a secret's value or metadata	read_write
`toknbase_delete_secret`	Delete a secret by name	read_write
`toknbase_get_secret`	Retrieve the plaintext value of a secret by name (requires agent access enabled on the secret)	read_only
`toknbase_search_secrets`	Find secrets by name or environment	read_only
`toknbase_list_folders`	List all folders in the vault	read_only
`toknbase_create_folder`	Create a new folder	full_access
`toknbase_assign_folder`	Assign a secret to a folder	full_access
`toknbase_rotate_secret`	Rotate a secret and save version history	read_write
`toknbase_batch_create_secrets`	Create up to 20 secrets in one call	read_write
`toknbase_list_team_secrets`	List secrets for a team you belong to	read_only
`toknbase_get_audit_log`	Retrieve paginated audit log entries	read_only
`toknbase_get_agent_token_info`	Inspect this token's name, scope, and folder restriction	read_only
`toknbase_get_secret_by_environment`	Retrieve a secret value for a specific environment	read_only

@toknbase/mcp-server is live on npm.View on npm