Open source Redact

Redact

Open source · MIT · Coming soon

Keys your agents can use, never read.

A native Mac vault for developer secrets. Keys stay encrypted behind Touch ID, projects get their variables at run time instead of from .env files, and every folder knows which cloud account it deploys to.

Redact screenshot

No more .env files

redact run gives a command its variables for one environment, and nothing lands on disk.

Approve on your Mac

When an AI agent asks for secrets, you approve with Touch ID: once or for 15 minutes.

Masked output

Any value that prints comes out as [redact:NAME], so it never enters an agent's context.

One account per folder

Bind folders to Cloudflare, GitHub, Vercel, Supabase or AWS accounts. wrangler deploy just goes to the right one.