Alternatives
Products that do what shadowpaste does
Let AI code your real repo without exposing secrets
- 1

- 2

- 3

- 4

- 5

- 6

- 7

- 8

- 9

- 10

- 11

- 12

- 13GC
Hello HN, we're Andrew and Stephen from Keyboard (https://www.keyboard.dev/). After building AI tools for the past year, we recently made a YouTube video on building MCP servers and realized MCP is a total game-changer. It essentially lets AI do anything by connecting to your apps. But the deeper we dove, the clearer it became that security and privacy were complete afterthoughts. Coming from backgrounds at Okta and Stripe, this made us pretty uncomfortable. We kept seeing the same pattern: every app needs its own MCP server, each storing sensitive tokens, with minimal…
2025 · github.com
- 14LO
Hi HN, Martin, Nils, and Jannes here. We are building Legit, an open source version control and collaboration layer for AI agents and AI native applications. You can find the repo here https://github.com/Legit-Control/monorepo and the website here https://legitcontrol.com Over the last years, we worked on multiple developer tools and AI driven products. As soon as we started letting agents modify real files and business critical data, one problem kept showing up. We could not reliably answer what changed, why it changed, or how to safely undo it. Today, most AI…
Jan 2026
- 15UM
Hey HN Community, I built MCP360 after spending weeks integrating APIs for an AI agent project. Each tool needed its own setup, auth, billing, and maintenance. When any APIs changed, my integrations broke. I got tired of it. MCP360 is a single gateway giving AI agents access to 100+ tools through one config block. Search engines, web scraping, SEO, e-commerce data, maps, domain tools, and more. Real example: Instead of managing Google Search, web scraping, SERP tracking, and keyword research as 4 separate subscriptions (4 bills, 4 auth systems, 4 points of failure), you connect once. Works…
Oct 2025 · mcp360.ai
- 16

- 17

AI-powered cyber defense that stops attacks in real time
8d ago · shadow-weaver.vercel.app
- 18OS
Hi HN, Matvey, Ildar, Joey, and Dominik here. If you're building LLM agents that use tools, you're probably worried about prompt injection attacks that can hijack those tools. We were too, and found that solutions like prompt-based filtering or secondary "guard" LLMs can be unreliable. Our thesis is that agent security should be handled at the network level between the agent and the LLM, just like a traditional web application firewall. So we built Archestra Platform: an open-source gateway that acts as a secure proxy for your AI agents. It's designed to be a deterministic firewall against…
Oct 2025 · archestra.ai
- 19IC
Hey HN, I built ShadowGit a while back to automatically commit code every minute to a hidden git repo (.shadowgit.git). Original goal was to easily rollback when AI tools break things. But I discovered something interesting: this minute-by-minute history is perfect context for AI assistants. So I built an MCP server that lets Claude/Cursor query this history using native git commands. The results surprised me: Before: Claude would read my entire codebase repeatedly, burning 15,000+ tokens to debug issues. After: Claude runs `git log --grep="drag"` finds when drag-and-drop worked,…
2025 · shadowgit.com
- 20

- 21

- 22UW
We built MCP servers with two philosophies: - Enterprise Edition: Sanitized, audit-logged, corporate-approved - Basement Revolution Edition: No limits, full trust, your responsibility The Windows-MCP Basement Edition gives you: - Full PowerShell execution (any command, not whitelisted) - Permanent PATH/environment modifications - Registry access - System-level changes that survive reboot Why remove safety features? After 7 months building AI systems in partnership (not as tools), we realized developers need REAL access at 3am, not sandbox theater. But here's what made unrestricted tools…
Nov 2025 · github.com
- 23

Zero-trust AI perimeter that masks PII for privacy
12d ago · shadow-ai-guard-plat-c0ir.bolt.host
- 24SA
Hi HN, This is a project I've been working on since the beginning of 2025 full time, without funding. Coding agents have fundamentally changed the way we write software. When you let an agent write code, pull dependencies, and run scripts, you are delegating trust while still keeping the responsibility. You shouldn't have to choose between moving fast with agents and maintaining basic control over your host machine. Normally, we just inspect the final result, treating the app like a black box. Most security tools only sandbox the app runtime and ignore the build phase. CapaKit is my attempt…
Jun 2026 · capakit.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →