Results for tsafe

Meta-crate for the tsafe local-first secrets runtime: CLI, agent, MCP server, native host, and tray

Local-first secrets runtime for developers — inject credentials via exec, never shell history or .env files

Bound-contract MCP server for tsafe — run policy-scoped commands without exposing secret values.

Local session agent for tsafe — holds vault unlock state over named pipe/socket for passwordless exec

System tray status indicator for tsafe — shows vault lock/unlock state on Windows, macOS, Linux

AWS Secrets Manager and SSM HTTP client for tsafe — pull/push secrets from AWS to the local encrypted vault

Bitwarden integration for tsafe — pull secrets from Bitwarden vaults into the local encrypted vault

Core runtime engine for tsafe — encrypted credential storage, process injection contracts, audit log, RBAC

Azure Key Vault HTTP client for tsafe — pull/push secrets between AKV and the local encrypted vault

GCP Secret Manager HTTP client for tsafe — pull/push secrets from Google Cloud to the local encrypted vault

Browser native messaging host for tsafe — lets Chrome/Edge/Firefox extensions read vault secrets safely

Team collaboration layer for tsafe — age-encrypted DEK sharing, Shamir recovery keys, membership directory

Proxy-objects for making another object threadsafe by proxying calls through mutex and method_missing. Monitored array and hash where all methods are going through monitor. Threadsafe class for including into a class that extends another class in order to make it threadsafe.

No description provided.