Token Guard

Stop API keys from landing in your agent chats, and find the ones already there. Rejects a message that contains a credential before it reaches the agent or thread history. Scans Claude Code, Codex and BB history on your server in one click. Lists each credential by kind and fingerprint with a link to its revoke page, and never shows, stores or sends a value.

Overview

View source

Pasted an API key into a chat? It now sits in plain text in your agent history. Token Guard stops the next one before it is sent and shows you the ones already there.

What you get

Messages containing a credential are rejected before they reach the agent or the thread history.
A Token Guard page scans Claude Code, Codex, and BB history in one click.
A report with the kind of each credential, a fingerprint, where and how often it appears, and a link to revoke it.

How it works

Everything runs on your BB server. Values are never shown, logged, or stored, and nothing leaves the machine. Only formats with a distinctive prefix are recognized, so false blocks stay rare. It does not check attached files or other enrolled machines.

More from Alexander Kashin

Change GateApprove production changes from a card that says what changes, where and how to undo it. Agents ask before a migration, a deploy or deleting shared data, and you answer with one click. An approval covers one request, and a decline tells the agent not to look for another route. Every decision stays in a journal page and in bb change-gate log. Agents are instructed to ask; the gate does not block other tools.New File VersionsSee which copy of a deck, document or spreadsheet is the latest across all your projects. Groups v2, final, dated and (1) copies of one document, in English and Russian. Copies in archive folders never count as the latest ahead of a current one. Agents get the same answer from bb file-versions list, so they work from the right file. Reads project folders on the BB server and never changes a file.New Try ItTest what your agent built from your phone, and send your verdict back with one tap per check. The agent shows a QR code, a link, what changed and a checklist in place of the composer. Each check gets Works or Broken, plus an optional note, and the answer goes straight back to the agent. Localhost links are refused, so the link you get opens on your phone.New

More in Security 5

Protect credentials or prevent unsafe code.

View all

Env CatalogStore API keys, tokens, and secrets in a single encrypted catalog across all BB sessions and machines. Securely request credentials via masked in-app modals. Agents automatically check available credentials before prompting you, and persist newly provided keys on demand. Values are encrypted at rest with AES-256-GCM and synchronized via your central BB server. Includes dedicated agent tools, a full-featured management UI with .env import/export, and terminal CLI commands.

Kirill Vechkasov57

Security GuidancePattern-matched security warnings for code the agent writes — 25 rules covering unsafe deserialization, injection, XSS, and crypto footguns.

prismatic755

Password GateLocks the bb app behind a password, so an unattended window stops exposing your threads. Set the password in Settings, and every window shows an unlock panel until someone enters it. Tick Trust this device once and that browser skips the prompt until the trust window ends. Forgot it? The panel covers the Settings page, so run `bb password-gate reset` in a terminal to open the app again. The lock is the app window, not your data: it does not stop anyone who can run commands on the bb machine or reach its port.

rayzalzero7