Tokenhush
github.com/fregie/tokenhush- Category
- Developer Tools
- Rank
- No. 3624Tools index
Previous survey · No. 3468 ·
- Pricing
- Open Source
- Type
- TOOL
- Use case
- Security & Identity
- GitHub
- 7 stars
- Latest release
- v0.7.1
- Date
About
Tokenhush is a local, loopback-only HTTP gateway that sits between an AI coding tool and the vendor API, detecting secrets and PII in outgoing requests and replacing them with placeholders before they leave the machine. It works without a MITM proxy or root certificate, redacting values across many files in a single pass.
At a glance
Tokenhush is a local gateway that replaces recognized secrets in requests from coding tools with placeholders. It is worth evaluating as a second layer if your tool can use a custom API base URL.
Good fit
Developers who want to catch common secret patterns before request bodies go to a model provider.
Consider something else when
Keep sensitive projects out of the model workflow if policy requires a guarantee that no secret can leave.
Start here
Use synthetic values shaped like a supported token and one shaped like an internal credential. Check what reaches a test endpoint before trusting the detector for either format.
Cost and requirements
Apache-2.0 tool for macOS, Linux and Windows. The coding client must be able to route requests through the loopback gateway.
Limits to know
Coverage depends on patterns and the traffic sent through the gateway. Its security notes also describe response-stream cases where restoration is limited.
Sources checked 2026-11-05. Source-based assessment.
Why it made the leaderboard
Lets developers point cloud coding agents at codebases containing secrets without those secrets leaving the machine, avoiding the security tradeoffs of a MITM-style redaction proxy.
Tags
Tech Stack
Comments (0)
No comments yet
Editorially curated, with community endorsements as a secondary signal. Corrections welcome.