Chrome extension that blocks API keys from being pasted into AI tools
VaultBix is two developer security tools — a Chrome extension and a PTY-based CLI wrapper — that catch API keys, passwords, and PII before they leave your browser or your terminal. 100% local detection, open source, MIT. Built by Carl Gao & Max.
Chrome extension that blocks API keys from being pasted into AI tools launched on May 13, 2026 with 5 votes, #2,008 of 20,538 launches that month and more than 75% of that year's launches.
What it does
Chrome extension that stops engineers from leaking API keys and secrets into ChatGPT, Cursor, and other AI tools. 100% local scanning. - carlgaopapi-png/vaultbix-extension
VaultBix is a Chrome extension that detects API keys, passwords, and sensitive data before you share them with AI tools. 100% local scanning — nothing leaves your browser. ⚠️ VaultBix is no longer actively maintained. The code stays up and the extension keeps working — it's open source, so fork it and build on it. Built by Carl and Max, 2025–2026. VaultBix monitors outgoing requests on AI platforms (ChatGPT, Claude, Gemini, Copilot, etc.) and scans for sensitive data using local pattern matching. When a threat is detected, VaultBix shows a banner with the secret type and either warns or blocks based on your sensitivity setting: Strict mode blocks any detected secret before it leaves your…from github.com
Does a similar job
all alternatives →
OneCLI – Vault for AI Agents in RustMar 2026 · github.com · ▲161We built OneCLI because AI agents are being given raw API keys. And it's going about as well as you'd expect. We figured the answer isn't "don't give agents access," it's "give them access without giving them secrets." OneCLI is an open-source gateway that sits between your AI agents and the services they call. You store your real credentials once in OneCLI's encrypted vault, and give your agents placeholder keys. When an agent makes an HTTP call through the proxy, OneCLI matches the request by host/path, verifies the agent should have access, swaps the placeholder for the real…
Local Privacy Firewall-blocks PII and secrets before ChatGPT sees themDec 2025 · github.com · ▲111OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…
Developed from my Prison cell: A Libcurl TUI HTTP Client in Rust.2023 · github.com · ▲47HTTP client/libcurl TUI front end in Rust, with request + key storage - PThorpe92/CuTE
- S2Sx 2.0 – Share AI skills with your team through a Dropbox folderJul 2026 · sleuth-io.github.io · ▲44
Hi all, author here. SX started as a CLI to let developers share skills across AI clients without having to rely on git for storage. This allowed sharing at the Repo/Team/Org and Personal level. However, the more we spoke to users the more we realized that non-technical users were actually using skills more and more but they had no way to share. And there was no way you were going to get your legal team to install and learn git. SX 2.0 is targeting non-technical teams by adding a native Mac, Windows and Linux app. Our vault format was reworked so it can be used directly as a claude…

Locki SecurityApr 2026 · lockisecurity.com · ▲12Protect PII and sensitive information in any web app
More ai this month
the category →



Paintings by AI models: programs run through a simulation of oil paint.
AI · 20d ago · stillwet.art

PixVerse R2▲381A real-time world model you can explore and change
AI · 28d ago · world.pixverse.video
Source: Show HN post ↗
Launched alongside, May 2026
the whole month →

Parallel agents, diff reviewer, and multi-model comparisons
Dev tools · May 2026 · kilo.ai



Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…
Life & fun · May 2026 · github.com

🌱 Private, quiet space for thinking. Simple app for .md files. - zakirullin/files.md
Dev tools · May 2026 · github.com