A zero-dependency JavaScript & TypeScript library that masks API keys, tokens, credit cards, emails and national IDs in logs, LLM prompts, HTTP and datasets — reversibly, in 24 languages.
Reads the values, not just field names — it catches the key pasted into a free-text note or a stack trace.
A vault swaps secrets for placeholders and restores them — send a redacted prompt to an LLM, then restore the reply.
createAgentFlow binds protected values to trusted sources, exact tool arguments, and cumulative budgets.
Password/secret/token keywords in 24 languages, plus checksum-validated national IDs and IBAN.
pino, winston, HTTP middleware, streams, CSV datasets, a fetch egress guard — one policy across them all.
Bounded, linear-time patterns you can point at untrusted input. Nothing to install, runs anywhere JS runs.
Mask emails, cards, identifiers, phone numbers, and nested values locally.
Protect Pino, Winston, console, HTTP request snapshots, and streams.
Keep secrets out of OpenAI and Anthropic calls with local placeholders.
Prevent a model from moving one tool's placeholder into another tool call.
Permit secret restoration only at approved tools and exact argument paths.
Add source-to-sink secret controls after tool-call validation and before execution.