Is Toknbase an AI agent or a secrets manager?

Both — the vault is the engine, the agent is the product. Toknbase is an AI SecOps agent that actively scans repos, fixes exposed secrets, opens PRs, verifies every fix, and logs each action with a tamper-evident on-chain receipt. The vault stores secrets with zero-knowledge encryption so even the agent cannot read the values it protects.

What can the AI SecOps agent do?

The agent scans public and private GitHub repos for exposed credentials, monitors continuously on every new commit, proposes fix PRs to replace hardcoded secrets with secure runtime calls, verifies fixes are gone after application, checks whether found credentials have appeared in known breach databases, and sends a weekly CISO briefing with your full security posture. Every action is logged on-chain with a cryptographic receipt.

Can Toknbase — or its employees — read my secrets?

No. Client-side encryption means we store only ciphertext. We never have your encryption key. Even a Toknbase engineer with direct canister access would only see encrypted bytes. This is a cryptographic guarantee, not a policy promise.

How do I use Toknbase with AI agents like Claude or Cursor?

Toknbase provides a hosted MCP (Model Context Protocol) endpoint at https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp. Add it to your Claude Desktop, Cursor, or Windsurf config as a JSON block — no installation, no npm package, no local server required.

What is the pricing for Toknbase?

Toknbase offers three plans: Free ($0 — 1 seat, 50 secrets, 3 scans/month, free forever), Pro ($19.99/seat/month or $15.99/seat/month billed annually — unlimited seats, private repo scanning, AI auto-remediation, full MCP endpoint, pre-commit hook), and Enterprise ($499.99/month flat — everything in Pro plus SSO/SAML, custom detectors, dedicated support, DPA, and 99.9% SLA). Annual billing saves 20% on Pro.

Can I change plans at any time?

Yes — upgrade, downgrade, or cancel at any time. Upgrades take effect immediately. Downgrades apply at the next billing cycle.

Is there a free trial?

The Free plan is free forever and includes public repo scanning and an on-chain audit trail — no credit card required. Pro and Enterprise plans can be started immediately with a paid subscription.

How does Toknbase compare to Doppler or HashiCorp Vault?

Three key differences: (1) It's an AI agent, not a passive vault — it actively watches repos, finds leaks, and opens fix PRs without being asked. (2) Zero-knowledge encryption — Toknbase cryptographically cannot read your secrets, even under subpoena. (3) On-chain audit trail — every agent action has a tamper-evident cryptographic receipt. No other secrets management tool provides all three.

How is Toknbase different from using .env files?

.env files store secrets on disk in plaintext and are frequently committed to version control by accident. Toknbase encrypts secrets in your browser before they leave your device, stores only ciphertext, actively scans your repos for accidentally exposed values, and can automatically open a fix PR when it finds one. It's a proactive agent, not a static file.

Can Toknbase scan private GitHub repos?

Yes. Public repos can be scanned instantly with no signup. To scan private repos, connect your GitHub account via OAuth — Toknbase requests the minimum required permissions and uses a short-lived access token. Private repo scanning is included in the Pro plan.

What happens if a secret is exposed in an old commit?

Removing a secret from a file does not remove it from git history — anyone with access to the repository can still find it in old commits. Toknbase scans git history for exposed secrets, not just the current state of the code. When it finds one, it flags it as a historical exposure and recommends rotating the credential immediately, since it must be treated as compromised.

← Back to pricing

Toknbase

Snyk

Secrets deserve a dedicated platform

Snyk's secrets scanning is a secondary add-on to a vulnerability scanner. Toknbase is purpose-built — vault + scanning + AI auto-rotation in one platform, at $5/seat less per month.

WHY TOKNBASE

What Toknbase does that Snyk doesn't

Purpose-built vs add-on feature

Snyk is a vulnerability scanner. Secrets scanning is a secondary feature added to broaden the product surface. Toknbase is built from the ground up for secrets — every feature, every integration, every design decision centers on secrets security.

Vault + scan + fix — Snyk has no vault

Snyk detects secrets in code but can't store them securely. You still need a separate vault tool. Toknbase handles the complete lifecycle — store, scan, rotate, remediate, and audit — in one platform, with no additional tools required.

AI agent auto-rotates. Snyk has no rotation.

When Snyk finds a hardcoded secret, it tells you. When Toknbase finds one, it immediately rotates the key, delivers the new value to your vault, opens the PR removing the old credential, and logs every action on-chain — autonomously.

FEATURE COMPARISON

Toknbase vs Snyk — side by side

Feature	Toknbase	Snyk
Secrets vault
Per-seat pricing	$19.99/mo	See current pricing →
Secrets scanning		Partial — add-on feature
Code vulnerability scanning
Container / IaC scanning
AI auto-remediation (secrets)
Automated key rotation
PR auto-creation on fix
MCP endpoint for AI agents
Pre-commit hook
On-chain audit trail
AES-256-GCM client-side encryption
CI/CD integrations
Purpose-built for secrets
SSO / SAML	Enterprise	Enterprise

PRICING

$5/seat less. Purpose-built.

Snyk Team

See current pricing →

Pricing subject to change

Code vulnerability scanning
Container and IaC scanning
Pre-commit hook
Secrets scanning (add-on)
No secrets vault
No AI auto-remediation
No key rotation
No MCP endpoint

Toknbase Pro

$19.99/seat/mo

Secrets vault (purpose-built)
Public + private repo scanning
Pre-commit hook
AI auto-remediation
Automated key rotation
PR auto-creation on fix
Full MCP endpoint for AI agents

Note: If your team needs code vulnerability + container scanning, Snyk and Toknbase are complementary tools — Snyk for code, Toknbase for secrets.

COMPLEMENTARY TOOLS

When to use Toknbase and Snyk together

Toknbase and Snyk solve different problems — many security teams use both:

Use Snyk for container scanning, dependency vulnerabilities, and IaC misconfigurations — Snyk's scanner is purpose-built for code-level security analysis.
Use Toknbase for secrets management — storing, rotating, and monitoring credentials — and for continuously scanning repos for exposed API keys and tokens.
Toknbase's MCP endpoint lets your AI coding assistant access secrets directly; Snyk has no equivalent for runtime secret injection or AI agent tooling.

Your secrets deserve a dedicated agent.

Public repo scanning is free. No credit card required.