Is Toknbase an AI agent or a secrets manager?

Both — the vault is the engine, the agent is the product. Toknbase is an AI SecOps agent that actively scans repos, fixes exposed secrets, opens PRs, verifies every fix, and logs each action with a tamper-evident on-chain receipt. The vault stores secrets with zero-knowledge encryption so even the agent cannot read the values it protects.

What can the AI SecOps agent do?

The agent scans public and private GitHub repos for exposed credentials, monitors continuously on every new commit, proposes fix PRs to replace hardcoded secrets with secure runtime calls, verifies fixes are gone after application, checks whether found credentials have appeared in known breach databases, and sends a weekly CISO briefing with your full security posture. Every action is logged on-chain with a cryptographic receipt.

Can Toknbase — or its employees — read my secrets?

No. Client-side encryption means we store only ciphertext. We never have your encryption key. Even a Toknbase engineer with direct canister access would only see encrypted bytes. This is a cryptographic guarantee, not a policy promise.

How do I use Toknbase with AI agents like Claude or Cursor?

Toknbase provides a hosted MCP (Model Context Protocol) endpoint at https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp. Add it to your Claude Desktop, Cursor, or Windsurf config as a JSON block — no installation, no npm package, no local server required.

What is the pricing for Toknbase?

Toknbase offers three plans: Free ($0 — 1 seat, 50 secrets, 3 scans/month, free forever), Pro ($19.99/seat/month or $15.99/seat/month billed annually — unlimited seats, private repo scanning, AI auto-remediation, full MCP endpoint, pre-commit hook), and Enterprise ($499.99/month flat — everything in Pro plus SSO/SAML, custom detectors, dedicated support, DPA, and 99.9% SLA). Annual billing saves 20% on Pro.

Can I change plans at any time?

Yes — upgrade, downgrade, or cancel at any time. Upgrades take effect immediately. Downgrades apply at the next billing cycle.

Is there a free trial?

The Free plan is free forever and includes public repo scanning and an on-chain audit trail — no credit card required. Pro and Enterprise plans can be started immediately with a paid subscription.

How does Toknbase compare to Doppler or HashiCorp Vault?

Three key differences: (1) It's an AI agent, not a passive vault — it actively watches repos, finds leaks, and opens fix PRs without being asked. (2) Zero-knowledge encryption — Toknbase cryptographically cannot read your secrets, even under subpoena. (3) On-chain audit trail — every agent action has a tamper-evident cryptographic receipt. No other secrets management tool provides all three.

How is Toknbase different from using .env files?

.env files store secrets on disk in plaintext and are frequently committed to version control by accident. Toknbase encrypts secrets in your browser before they leave your device, stores only ciphertext, actively scans your repos for accidentally exposed values, and can automatically open a fix PR when it finds one. It's a proactive agent, not a static file.

Can Toknbase scan private GitHub repos?

Yes. Public repos can be scanned instantly with no signup. To scan private repos, connect your GitHub account via OAuth — Toknbase requests the minimum required permissions and uses a short-lived access token. Private repo scanning is included in the Pro plan.

What happens if a secret is exposed in an old commit?

Removing a secret from a file does not remove it from git history — anyone with access to the repository can still find it in old commits. Toknbase scans git history for exposed secrets, not just the current state of the code. When it finds one, it flags it as a historical exposure and recommends rotating the credential immediately, since it must be treated as compromised.

PRODUCT · CHANGELOG

What's New

A complete history of every version shipped in Toknbase — initial launch to current state.

v3.5.0HighlightApril 2026PaymentsDX

Pricing & Monetization

Per-seat pricing launched: Pro at $19.99/seat/month, Enterprise at $499.99/month
Stripe checkout integrated for Pro plan upgrades
Pricing page rebuilt with three tiers, feature comparison table, and annual billing toggle
Enterprise contact flow via support@toknbase.net with pre-filled request template

v3.4.0HighlightApril 2026AIDX

MCP Page Overhaul

MCP config snippet moved to top of page — first thing visitors see
Inline token generation button added — no more hunting through settings
Per-editor setup guides for Cursor, Claude Desktop, Windsurf, VS Code, Zed
Command demo converted from chat to structured commands (/scan, /rotate, /audit)

v3.3.0HighlightApril 2026AISecurity

Command-Driven Agent UI

Chat interface replaced with command structures and chip suggestions
Contextual action chips surface based on vault contents (Rotate exposed keys, Show audit log, etc.)
Public repo scanning now works with zero login required
Private repo 403 triggers inline sign-up prompt instead of silent failure

v3.2.0HighlightApril 2026AIDX

AI Agent Command Center

AI agent greeting personalized to your vault findings — critical exposures listed by name with severity counts
Start Remediation button and live command terminal wired to your vault
Terminal handles rotate, scan, audit, threat, and status commands
Greeting dismissible and re-shows when new scanned secrets arrive

v3.1.0April 2026SecurityAI

Auto-Vault Population from Scans

Scan findings automatically added to vault after GitHub scan completes
Each finding pre-labeled with type, severity, and"From GitHub scan" tag
Deduplication by secret type — vault stays clean on repeat scans
Severity badges on all auto-populated secrets (Critical/High/Medium/Low)

v3.0.0April 2026DXSecurity

Value-First Onboarding

Repo URL saved to localStorage and routes to Internet Identity login on Scan Now
Dedicated GitHub connect screen after login — same-tab OAuth redirect
Private scan auto-fires on return after GitHub OAuth completes
Returning users who already have GitHub connected skip the connect screen

v2.5.0HighlightMarch 2026DXSecurity

World-Class Dashboard Audit

Secrets page rebuilt: inline spreadsheet editor, two-column layout, keyboard navigation
Fixed-width masking on all secret values — no length leaks
Threats page: posture score with named dimensions, action items as primary surface
Tokens page: Personal Tokens and Service Identities split, one-time reveal, per-token audit history

v2.4.0February 2026DX

Navigation & Mobile Polish

Full mobile viewport polish — all public pages stay within the mobile viewport with no content overflow
Docs flyout expanded: Error Codes, CLI Reference, and Verify Audit Chain added to navigation
FAQ, About, and Disclosure moved to footer under Security & Legal
Horizontal swipe carousel for the features section — touch swipe on mobile, drag on desktop, keyboard arrow navigation, and dot indicators

What's New

Built in the open.

Toknbase ships continuously. Join now and get access to everything being built right now.

No credit card required.