A zero-dependency JavaScript & TypeScript library that masks API keys, tokens, credit cards, emails and national IDs in logs, LLM prompts, HTTP and datasets — reversibly, in 24 languages.
Reads the values, not just field names — it catches the key pasted into a free-text note or a stack trace.
A vault swaps secrets for placeholders and restores them — send a redacted prompt to an LLM, then restore the reply.
wrapOpenAI, wrapAnthropic, and createSession keep private data out of your model calls.
Password/secret/token keywords in 24 languages, plus checksum-validated national IDs and IBAN.
pino, winston, HTTP middleware, streams, CSV datasets, a fetch egress guard — one policy across them all.
Bounded, linear-time patterns you can point at untrusted input. Nothing to install, runs anywhere JS runs.