A zero-dependency JavaScript & TypeScript library that masks API keys, tokens, credit cards, emails and national IDs in logs, LLM prompts, HTTP and datasets — reversibly, in 24 languages.
Reads the values, not just field names — it catches the key pasted into a free-text note or a stack trace.
A vault swaps secrets for placeholders and restores them — send a redacted prompt to an LLM, then restore the reply.
wrapOpenAI, wrapAnthropic, and createSession keep private data out of your model calls.
Password/secret/token keywords in 24 languages, plus checksum-validated national IDs and IBAN.
pino, winston, HTTP middleware, streams, CSV datasets, a fetch egress guard — one policy across them all.
Bounded, linear-time patterns you can point at untrusted input. Nothing to install, runs anywhere JS runs.
Mask emails, cards, identifiers, phone numbers, and nested values locally.
Protect Pino, Winston, console, HTTP request snapshots, and streams.
Keep secrets out of OpenAI and Anthropic calls with local placeholders.
Prevent a model from moving one tool's placeholder into another tool call.