Local Desktop Secret Broker for Windows

Secret Management Built for AI Coding Agents.

One native Windows process holds your encrypted vault, serves local capabilities over MCP, and executes API calls with zero plaintext keys exposed to agent chats or LLM context windows.

Download for Windows (x64) Explore Architecture

Windows 10 / 11 (x64)

Tauri 2 Native Architecture

AES-256-GCM + Argon2id

MCP Protocol (Claude Code, Pi, VS Code)

Automatic Background Updates

Zero-Leak Broker Pattern

The Fundamental Flaw in AI Secret Handling

AI coding agents require API keys, database credentials, and deployment tokens to test and ship software. Pasting raw secrets into .env files or agent chats invites permanent exposure in context histories and cloud logs.

Traditional Key Exposure

Vulnerable

01

Plaintext in Chat or Files

You paste your Stripe or AWS key into chat prompts, bash commands, or local .env files.
02

Context Window Ingestion

The LLM provider ingests the raw secret in cleartext across every prompt and retry iteration.
03

Unchecked Exfiltration

Any confused agent or malicious dependency can echo the key to an external webhook or look-alike domain.

The Agentic Secrets Broker

Zero Plaintext

01

Sealed in Local Desktop Vault

Secrets reside exclusively in your encrypted local vault on 127.0.0.1:8788. Agents hold only opaque handles like @stripe_test.
02

In-Memory Capability Call

Agents call use_secret over MCP. The broker validates the destination host and attaches credentials in memory.
03

Scrubbed Responses & Audit

Responses are scrubbed across 6 encodings before returning to the agent. Every decision is fsynced to audit.jsonl.

Safety Levels

Automatic Risk Classification

Every credential receives an evaluated risk level (Low, Medium, High, or Very High). Cloud providers, billing hosts, and SSH keys evaluate to Very High; test credentials evaluate to Low. Configure custom tier policies: always allow, ask each time, or block.

Pure function classification rules

Approvals

Real-Time Hold Sheets

When an agent calls a high-risk secret or an unknown website, the request pauses. The desktop window surfaces with the calling program, target host, credential risk, and a live countdown timer. Grant once, 15 minutes, 1 hour, or block immediately.

Configurable timeout (default 120s)

Scoped Isolation

Scoped Credential Rooms

Group credentials into dedicated rooms for specific projects or agent roles. Issue room keys (asr_...) that grant visibility exclusively to that room. Any call outside the designated scope receives 403 room_scope.

X-Agentic-Room-Key header validation

Browser Bridge

Zero-Content-Script Extension

Chrome and BrowserOS Neo extension pairs securely via desktop-minted token. No scripts run on visited pages: fills occur strictly on deliberate user gesture (Alt+Shift+L) into verified top-level HTTPS forms matching credential host grants.

Strict CSP and loopback origin pinning

Agent Protocol

Native MCP Stdio Server

Run agentic-secrets-desktop.exe --mcp directly with Claude Code, Pi CLI, VS Code, Codex, or Gemini CLI. Agents discover capabilities, request new credentials safely, and execute API workflows without plaintext exposure.

Export 1-click .mcp.json from settings

Seamless Maintenance

Cryptographic Auto-Updates

Starting in 2.4.0, the app checks for new releases and downloads verified updates in the background. All installer payloads are cryptographically validated against the embedded public key before passive Windows installation.

Signed NSIS passive elevation

Ground Truth Engineering

Cryptographic and Network Guarantees

Agentic Secrets is engineered as a defense-in-depth desktop broker. Every boundary assumes untrusted local environments and potential agent confusion.

Subsystem	Implementation Detail	Operational Guarantee
Vault Encryption	Argon2id key derivation (64 MiB RAM, t=3, p=4) with authenticated AES-256-GCM envelope.	native_vault.enc on disk
Response Sanitization	Scrubbing engine scrubs secret values across 6 encodings (raw, base64, base64url, URL-encoded, hex lower, hex upper).	Zero secrets returned in API response bodies
Immutable Audit Trail	Every allow, block, or timeout decision is serialized and fsynced to audit.jsonl prior to upstream network socket writes.	~/.agentic_secrets/audit.jsonl
Host Grant Validation	Suffix-anchored whole-domain checks (*.example.com matches sub.example.com, never notexample.com).	Eliminates look-alike host exfiltration
Master Key Recovery	Random Data Encryption Key wrapped by password and 160-bit RFC 4648 base32 recovery code. Zero key escrow or email reset doors.	Honest recovery without third-party exposure
Loopback Firewall Guard	Installer injects local loopback Windows Firewall rule to prevent third-party WFP drivers from silently dropping SYN packets.	Reliable 127.0.0.1:8788 broker connectivity

Distribution

Install Agentic Secrets

Download the signed Windows installer for desktop use. After installing 2.4.0, all future updates install automatically with one click.

Agentic Secrets for Windows

Signed NSIS per-machine installer. Configures local loopback firewall access and registers the background desktop broker.

Download v2.4.0 Setup (.exe) Direct installer: agentic-secrets_2.4.0_x64-setup.exe

Version 2.4.0

Size 2.5 MB

Architecture Windows x86_64

System Requirement Windows 10 / Windows 11 (x64)

Runtime Evergreen WebView2 (Built-in)

Verification Embedded Ed25519 Signature

Getting Started in 3 Steps

Run Installer

Run the installer and approve the standard Windows UAC prompt. This configures the scoped loopback firewall rule.

Initialize Vault

Launch the app from the Start menu. Set your Master Password and securely record your 160-bit emergency recovery code.

Connect Your Agent

Export your ready-to-use .mcp.json file for Claude Code or Pi CLI, or pair the Chrome / BrowserOS Neo browser extension.

// Add to your project root .mcp.json or Claude Code settings
{
  "mcpServers": {
    "agentic-secrets": {
      "command": "C:\\Program Files\\Agentic Secrets\\agentic-secrets-desktop.exe",
      "args": ["--mcp"]
    }
  }
}