Is Toknbase an AI agent or a secrets manager?

Both — the vault is the engine, the agent is the product. Toknbase is an AI SecOps agent that actively scans repos, fixes exposed secrets, opens PRs, verifies every fix, and logs each action with a tamper-evident on-chain receipt. The vault stores secrets with zero-knowledge encryption so even the agent cannot read the values it protects.

What can the AI SecOps agent do?

The agent scans public and private GitHub repos for exposed credentials, monitors continuously on every new commit, proposes fix PRs to replace hardcoded secrets with secure runtime calls, verifies fixes are gone after application, checks whether found credentials have appeared in known breach databases, and sends a weekly CISO briefing with your full security posture. Every action is logged on-chain with a cryptographic receipt.

Can Toknbase — or its employees — read my secrets?

No. Client-side encryption means we store only ciphertext. We never have your encryption key. Even a Toknbase engineer with direct canister access would only see encrypted bytes. This is a cryptographic guarantee, not a policy promise.

How do I use Toknbase with AI agents like Claude or Cursor?

Toknbase provides a hosted MCP (Model Context Protocol) endpoint at https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp. Add it to your Claude Desktop, Cursor, or Windsurf config as a JSON block — no installation, no npm package, no local server required.

What is the pricing for Toknbase?

Toknbase offers three plans: Free ($0 — 1 seat, 50 secrets, 3 scans/month, free forever), Pro ($19.99/seat/month or $15.99/seat/month billed annually — unlimited seats, private repo scanning, AI auto-remediation, full MCP endpoint, pre-commit hook), and Enterprise ($499.99/month flat — everything in Pro plus SSO/SAML, custom detectors, dedicated support, DPA, and 99.9% SLA). Annual billing saves 20% on Pro.

Can I change plans at any time?

Yes — upgrade, downgrade, or cancel at any time. Upgrades take effect immediately. Downgrades apply at the next billing cycle.

Is there a free trial?

The Free plan is free forever and includes public repo scanning and an on-chain audit trail — no credit card required. Pro and Enterprise plans can be started immediately with a paid subscription.

How does Toknbase compare to Doppler or HashiCorp Vault?

Three key differences: (1) It's an AI agent, not a passive vault — it actively watches repos, finds leaks, and opens fix PRs without being asked. (2) Zero-knowledge encryption — Toknbase cryptographically cannot read your secrets, even under subpoena. (3) On-chain audit trail — every agent action has a tamper-evident cryptographic receipt. No other secrets management tool provides all three.

How is Toknbase different from using .env files?

.env files store secrets on disk in plaintext and are frequently committed to version control by accident. Toknbase encrypts secrets in your browser before they leave your device, stores only ciphertext, actively scans your repos for accidentally exposed values, and can automatically open a fix PR when it finds one. It's a proactive agent, not a static file.

Can Toknbase scan private GitHub repos?

Yes. Public repos can be scanned instantly with no signup. To scan private repos, connect your GitHub account via OAuth — Toknbase requests the minimum required permissions and uses a short-lived access token. Private repo scanning is included in the Pro plan.

What happens if a secret is exposed in an old commit?

Removing a secret from a file does not remove it from git history — anyone with access to the repository can still find it in old commits. Toknbase scans git history for exposed secrets, not just the current state of the code. When it finds one, it flags it as a historical exposure and recommends rotating the credential immediately, since it must be treated as compromised.

Find exposed secrets in your code — instantly.

Paste any GitHub repo URL below. No sign-up needed for public repos.

Paste any public GitHub repo URL to instantly scan for exposed secrets — no sign-up needed.

Scans public repos for free — sign up to scan private repos

Try an example:

12,483repos scanned this week

Works with every AI coding assistant

CursorClaude CodeWindsurfVS CodeZedCline

WHAT IS TOKNBASE?

The AI SecOps agent for your stack.

Not a dashboard you log into — an agent that works while you ship.Watches your repos, finds exposed secrets, opens the fix, and verifies it's gone— all without you asking. Every action is recorded in atamper-evident on-chain audit logwith a cryptographic receipt, andbehavioral anomaly detectionwatches your usage patterns in real time. The vault is zero-knowledge by construction — not by policy.

INTEGRATE

In 30 seconds or less.

Pick your integration path.

SCAN ANY PUBLIC REPO · NO INSTALL REQUIREDFree · Public repos

$ npx @toknbase/cli scangithub.com/your-org/your-repo

●Finds exposed API keys and credentials●Groups findings by severity●Works on any public repo

bash

npx @toknbase/cli get DATABASE_URL
# → postgresql://user:••••@prod.db:5432/app

View all docs →

* Run CLI and MCP server in local or trusted CI/CD environments only. Never request secret values over public or shared networks.

MCP-NATIVE

Your AI agent already knows how to call Toknbase

Add one config block. Every AI coding assistant — Cursor, Claude, ChatGPT, Kimi — can instantly find, fix, and rotate exposed secrets in your repos.

mcp.json — paste into Cursor / Claude / ChatGPT / Kimi

{
"mcpServers": {
"toknbase": {
"url":"https://4wj64-piaaa-aaaan-q5q7q-cai.icp0.io/mcp",
"headers": {"Authorization":"Bearer YOUR_TOKEN" }
 }
 }
}

Hosted endpoint — no install, no npm package, no local server.

Are there any exposed secrets in this repo?

Scanning repo…

Found 2 critical exposures:

→ AWS_SECRET_KEY in .env — line 14

→ STRIPE_SECRET_KEY in config/secrets.yml — line 8

Run /rotate to fix both automatically.

Get your free token

HOW IT WORKS

Up and running in minutes.

Step 01

Connect

Paste one JSON config into your AI editor. The hosted MCP endpoint is live — no install, no npm package, no local server.

Step 02

Store

Add secrets in the browser editor. Values are encrypted client-side before they ever leave your device.

Step 03

Use

Your AI agent calls get_secret and receives only the values you've explicitly unlocked for it. Every request logged on-chain, tamper-evident.

ZERO-TRUST BY DESIGN

What Toknbase deliberately cannot do.

This isn't a bug. It's the point.

Architectural Principle

Zero Trust by Design

Every secret is encrypted client-side with AES-256-GCM before it leaves your browser. Toknbase never sees plaintext. This is a cryptographic constraint — not a privacy policy.

Verify it

// CRYPTOGRAPHIC GUARANTEES — NOT POLICY PROMISES

Read or decrypt your secret values

The agent cannot read what it protects. Client-side encryption means only ciphertext reaches the canister — your encryption key is derived locally from your WebAuthn identity and never leaves your device.

Falsify its action log

Every fix, rotation, and verification the agent performs is written to an on-chain log with a cryptographic receipt. It cannot be edited, deleted, or suppressed — not by the agent, not by us.

Access secrets it wasn't granted

The agent cannot exceed its scope. Every token is bounded to specific folders and permission levels you set. The agent can only act on secrets you've explicitly unlocked for it — nothing else in your vault.

Correlate your identity to your data

With HKDF key derivation and per-secret random salts, your encryption keys are never tied to your public principal alone. Knowing your identity is not sufficient to reconstruct any key.

Access secrets across tenants

Strict multi-tenant isolation at the canister level. The agent operates within your namespace only — it has no visibility into any other tenant's vault.

We built the constraints in. You can verify them.View canister on ICP →

Toknbase vs. code scanners (Snyk, Semgrep)

Code scanners find logic bugs, CVEs, and insecure patterns in your source code. Toknbase finds and remediates exposed credentials — API keys, tokens, and secrets that should never be in your code. Most teams pair both tools. Toknbase handles the credential layer so the others don’t have to.

FEATURES

Everything you need. Nothing you don’t.

01 · YOUR DATA STAYS YOURS

Your secrets never leave your device unencrypted.

Everything is locked with a unique key on your device before it's saved — so even if someone broke into our servers, they'd see scrambled data, not your actual secrets. (We use AES-256-GCM encryption with per-secret keys derived by HKDF.)

PLAINTEXT

sk_live_••••••

ENCRYPTED

v5:HgEv···

HKDF · AES-256-GCM · Client-Side

INFRASTRUCTURE

Built on the Internet Computer.

No centralized vendor.No single point of failure.No backdoors.

Decentralized Infrastructure

Code runs across a global network of independent nodes. No AWS, no GCP, no single vendor to breach or subpoena.

Sovereign Data Ownership

Your canister is yours. No platform can shut it down, freeze your data, or read its state.

Inspectable by Design

Canister code is publicly verifiable on-chain. Zero-trust isn't a marketing claim — it's auditable by anyone.

No Vendor Lock-In

Open protocol, open bindings. Migrate, fork, or self-host whenever you want. No proprietary jail.

Secured by Internet Computer Protocol

Canister · xi7mc-uaaaa-aaaan-q5raa-cai

HKDF

Client-Side Key Derivation

On-chain

Audit log

SYS.ZERO_KNOWLEDGE

ACTIVE

100%

platform can never read your secrets

SYS.UPTIME

NOMINAL

99.9%

ICP decentralized infrastructure

SYS.ENCRYPTION

ACTIVE

AES-256

client-side HKDF key derivation

SYS.FOREVER_PLAN

ACTIVE

FREE

public repo scanning, always free

THE COMPARISON

The only column that’s all green.

How Toknbase compares to other secrets management approaches.

Feature comparison between Toknbase and alternative secrets managers
Feature	Toknbase	Cloud-Managed	Self-Hosted	Open Source
Native MCP Server / AI Agent Access First-class AI agent integration via MCP protocol	Supported	Not supported	Not supported	Not supported
Zero-Knowledge Encryption Provider can never read secrets	Supported	Not supported	Not supported	Not supported
Client-Side Encryption Encryption runs in your browser	Supported	Not supported	Not supported	Partial
Decentralized Infrastructure No single point of failure or trust	Supported	Not supported	Not supported	Not supported
WebAuthn / Passwordless No password to phish or leak	Supported	Not supported	Not supported	Not supported
On-Chain Audit Log Tamper-proof, cryptographically verified	Supported	Not supported	Not supported	Not supported
GDPR Deletion One call removes all your data. Audit logs are anonymized for compliance retention.	Supported	Partial	Partial	Partial
SIEM Integration Pipe audit events to Splunk, Datadog, etc.	Supported	Supported	Supported	Supported
API Tokens CI/CD access without credentials	Supported	Supported	Supported	Supported
Free Tier Try without a credit card	Supported	Supported	Not supported	Supported

~ = partial support. Based on publicly available documentation as of 2026.

ROI

Automate the work your team never has time for

Toknbase handles the secrets security workload that’s been manual and error-prone — finding exposures, rotating keys, opening PRs, verifying fixes, and logging every action. So your security team can focus on the work that actually requires human judgment.

Without Toknbase

With Toknbase

Manual secrets hygiene (engineering time)

$30–45K/yr

Est. engineering time for manual audits + rotation — the average breach costs $4.5M

Included

Secrets Management (Doppler/Infisical)

$525/mo

$6,300/yr for 25 seats

Included

Manual Repo Audits

$15,000/audit

2–4× per year

Included

Breach Monitoring Service

$500/mo

$6,000/yr

Included

Compliance Audit Prep

$20,000+/yr

External consultant

Included

24/7 Autonomous Monitoring

Not possible

Human ops required

Built-in, exclusive

On-Chain Verifiable Receipts

Not possible

No tool provides this

Built-in, exclusive

Annual total

$280,000+/yr

Toknbase

$19.99/seat/mo

Cost estimates based on publicly available pricing and industry averages as of 2026. Toknbase Pro: $19.99/seat/month ($15.99 billed annually — $191.88/seat/year).

COMPLIANCE READY

Built for teams that need to prove security.

SOC 2 Ready

Audit trail + access controls built in. SIEM-ready audit export with HMAC-signed webhook delivery.

GDPR

Data deletion, export, and encryption

HIPAA-Aligned

Encryption at rest, audit logs, no plaintext

View security docs →

FAQ

Common questions.

GET STARTED · FREE FOREVER

Your AI security engineer.
Always watching.

Every fix proved on-chain. Every action bounded and audited. Start free — no credit card, no expiry.

Read the security docs

Passwordless loginInstant setupNo lock-in

Find exposed secrets in your code — instantly.

The AI SecOps agent for your stack.

In 30 seconds or less.

Your AI agent already knows how to call Toknbase

Up and running in minutes.

Connect

Store

Use

What Toknbase deliberately cannot do.

Everything you need. Nothing you don’t.

Your secrets never leave your device unencrypted.

Built on the Internet Computer.

The only column that’s all green.

Automate the work your team never has time for

Built for teams that need to prove security.

Common questions.

Is Toknbase an AI agent or a secrets manager?

What can the AI SecOps agent actually do?

Can Toknbase — or its employees — read my secrets?

How does client-side encryption work?

What authentication does Toknbase use?

How do I use Toknbase in CI/CD pipelines?

What happens if the canister is compromised?

How do I delete my data?

What does Toknbase scan for?

Does Toknbase scan for code vulnerabilities?

How is Toknbase different from a secrets manager like Doppler?

Your AI security engineer.Always watching.

Your AI security engineer.
Always watching.