Is Toknbase an AI agent or a secrets manager?

Both — the vault is the engine, the agent is the product. Toknbase is an AI SecOps agent that actively scans repos, fixes exposed secrets, opens PRs, verifies every fix, and logs each action with a tamper-evident on-chain receipt. The vault stores secrets with zero-knowledge encryption so even the agent cannot read the values it protects.

What can the AI SecOps agent do?

The agent scans public and private GitHub repos for exposed credentials, monitors continuously on every new commit, proposes fix PRs to replace hardcoded secrets with secure runtime calls, verifies fixes are gone after application, checks whether found credentials have appeared in known breach databases, and sends a weekly CISO briefing with your full security posture. Every action is logged on-chain with a cryptographic receipt.

Can Toknbase — or its employees — read my secrets?

No. Client-side encryption means we store only ciphertext. We never have your encryption key. Even a Toknbase engineer with direct canister access would only see encrypted bytes. This is a cryptographic guarantee, not a policy promise.

How do I use Toknbase with AI agents like Claude or Cursor?

Toknbase provides a hosted MCP (Model Context Protocol) endpoint at https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp. Add it to your Claude Desktop, Cursor, or Windsurf config as a JSON block — no installation, no npm package, no local server required.

What is the pricing for Toknbase?

Toknbase offers three plans: Free ($0 — 1 seat, 50 secrets, 3 scans/month, free forever), Pro ($19.99/seat/month or $15.99/seat/month billed annually — unlimited seats, private repo scanning, AI auto-remediation, full MCP endpoint, pre-commit hook), and Enterprise ($499.99/month flat — everything in Pro plus SSO/SAML, custom detectors, dedicated support, DPA, and 99.9% SLA). Annual billing saves 20% on Pro.

Can I change plans at any time?

Yes — upgrade, downgrade, or cancel at any time. Upgrades take effect immediately. Downgrades apply at the next billing cycle.

Is there a free trial?

The Free plan is free forever and includes public repo scanning and an on-chain audit trail — no credit card required. Pro and Enterprise plans can be started immediately with a paid subscription.

How does Toknbase compare to Doppler or HashiCorp Vault?

Three key differences: (1) It's an AI agent, not a passive vault — it actively watches repos, finds leaks, and opens fix PRs without being asked. (2) Zero-knowledge encryption — Toknbase cryptographically cannot read your secrets, even under subpoena. (3) On-chain audit trail — every agent action has a tamper-evident cryptographic receipt. No other secrets management tool provides all three.

How is Toknbase different from using .env files?

.env files store secrets on disk in plaintext and are frequently committed to version control by accident. Toknbase encrypts secrets in your browser before they leave your device, stores only ciphertext, actively scans your repos for accidentally exposed values, and can automatically open a fix PR when it finds one. It's a proactive agent, not a static file.

Can Toknbase scan private GitHub repos?

Yes. Public repos can be scanned instantly with no signup. To scan private repos, connect your GitHub account via OAuth — Toknbase requests the minimum required permissions and uses a short-lived access token. Private repo scanning is included in the Pro plan.

What happens if a secret is exposed in an old commit?

Removing a secret from a file does not remove it from git history — anyone with access to the repository can still find it in old commits. Toknbase scans git history for exposed secrets, not just the current state of the code. When it finds one, it flags it as a historical exposure and recommends rotating the credential immediately, since it must be treated as compromised.

PRODUCT · ROADMAP

Roadmap

What we're working on, what's planned, and what we're thinking about next.

Shipped13 items

CLI Scanner — Available Now
Scan any repo from your terminal — npx @toknbase/cli scan works on any machine, no install needed. Finds exposed API keys, tokens, and credentials in seconds.
Auto-Remediation Agent
The agent finds exposed secrets, rotates them, opens a PR, and verifies the fix — automatically. Human approval only required to merge the PR.
GitHub Actions Integration
Scan on every pull request or push — block merges when Critical secrets are found. Ready-to-copy workflow templates for PR scanning, push monitoring, and scheduled full-repo scans.
Typography & Design System Audit
WCAG AA contrast pass across all pages. ~200 hardcoded indigo classes replaced with design tokens. Eyebrow labels standardized. Redundant font imports removed.
Performance Optimization
esbuild minification enabled (30–50% bundle reduction). Vendor chunking for @dfinity/*, Radix, motion. Heartbeat timer removed — zero cycle drain on idle canister.
OpenAPI Specification
Machine-readable OpenAPI 3.1 spec published at /openapi.json. Enables Postman imports, auto-generated SDKs, and third-party integrations.
Security Posture Dashboard
Full security posture dashboard on the Threats page. Five scored dimensions (Secret Hygiene, Access Control, Audit Coverage, Team Exposure, Anomaly Rate), actionable recommendations engine with direct-link CTAs, and 30-day dual-series activity timeline.
Token Expiry / TTL
API and agent tokens support optional expiry dates enforced at the canister level. Expiry warnings and badges surface in the dashboard. Expired tokens are rejected on all code paths.
Environment Hierarchy
Native Development / Staging / Production secret namespacing with per-environment values and production access gating for team members. Canister-synced cross-device.
SIEM Integration
Batch webhook delivery of audit events to Splunk, Datadog, Elastic, Sumo Logic, and any HTTP endpoint. Category filters, HMAC-SHA256 payload signing, retry logic, and delivery status UI. Moved to the Compliance page where it semantically belongs.
MCP Server v1.7
15 agent-token tools published to npm (@toknbase/mcp-server@1.7.0): get, create, update, delete, search, rotate, batch, audit, folder management, and environment-aware retrieval. All tools pass smoke tests.
CLI
@toknbase/cli npm package with get, list, set, and export commands for CI/CD and developer workflows. All commands pass smoke tests.
HKDF+AES-256-GCM Encryption — Current
Client-side encryption using HKDF key derivation from user identity and per-secret salts. AES-256-GCM encryption happens entirely in the browser. The canister stores only ciphertext. All legacy secrets are transparently re-encrypted to the current scheme on next reveal.

In Progress1 item

GitHub Private Repo OAuth Flow
Full private repository scanning via GitHub OAuth. The connect flow, token handling, and post-scan vault population are being hardened for production reliability.

Planned3 items

Shareable Scan Results Links
After any scan, generate a public URL for the results. Share findings with your team or CISO instantly.
Plain-English Audit Summaries & Email Alerts
Weekly CISO briefing with human-readable summaries and real-time alerts for critical events.
Secret Inheritance Diff View
Side-by-side comparison of environments with color-coded gaps and one-click copy.

Considering6 items

SSO / SAML
Enterprise single sign-on via SAML 2.0 and OAuth providers.
IP Allowlisting
Restrict vault access to specific IP ranges for Enterprise security compliance.
DPA Availability
Data Processing Agreement for Enterprise customers in regulated industries.
Browser Extension
One-click scan of any GitHub repo page you're viewing. Findings sync directly to your vault.
Dynamic Secrets / Short-Lived Credentials
Generate time-limited credentials on demand with automatic expiry. Eliminates long-lived credentials entirely — the future of secrets management.
Secret Referencing
Reference the value of one secret inside another using a template syntax.

Have a feature request?Let us know