GET STARTED · 5 MINUTES
Quickstart
Two tracks. Complete Track 1 to store your first secret. Continue to Track 2 to connect your AI editor.
Store your first secret
Create an account and save an encrypted secret in under 2 minutes.
Sign in with Internet Identity
Toknbase uses WebAuthn via Internet Identity — no passwords, no email required. Your biometrics or hardware key are the only credentials needed.
Create a secret
Once signed in, click"New Secret"in the dashboard. Give it a name (e.g.STRIPE_KEY), paste the value, and save.
Zero-knowledge encryption.Secrets are encrypted in your browser with AES-256-GCM before being stored. The canister never sees plaintext.
Read it back
Click the eye icon next to any secret to reveal the decrypted value. You can also copy it directly to clipboard without revealing it on screen.
Track 1 complete
Your first secret is encrypted on-chain. Ready to connect your AI editor?
Connect to your AI editor
Give your AI assistant secure, scoped access to your secrets via MCP.
Create an agent token
In the dashboard, go toAPI Tokens → Agent Tokenstab. Click"Generate Agent Token", give it a name, and choose a scope.
| Scope | What the AI can do |
|---|---|
| read_only | List secret names and metadata |
| read_write | Read + create/update secrets |
| full_access | Read + write + folder assignment |
# Your token will look like this agt_your_token_here
Add to your editor
Paste this config into your editor's MCP settings. The canister ID is pre-filled — just replace your agent token.
{
"mcpServers": {
"toknbase": {
"type":"http",
"url":"https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp",
"headers": {
"Authorization":"Bearer YOUR_AGENT_TOKEN"
}
}
}
}For editor-specific setup (Cursor, Windsurf, Claude Code, VS Code, Zed, Cline), see theAI Agents pageafter signing in.
After pasting the config, restart your editor to pick up the new MCP server. Test it by asking your AI:"List my Toknbase secrets".