Skip to content
Back to the index

tokenstash

PyPIInfrastructure

PulseGate's liveness check found it on 14 Oct 2026; it is registered on GitHub and PyPI and has been in the index since 13 Sep 2026. How this is checked

tokenstash is an open-source command-line credential broker for coding agents. It stores API keys, scopes approval by directory, and helps prevent secrets from appearing in status output.

Inferred · not functionally tested

Open SourceMITCLISelf-hosted
Visit PyPI

Overview

5 features

Purpose: Keeping coding-agent credentials secure and scoped to approved directories without exposing them in command output.

Inferred · not functionally tested

Audience: developers using coding agents

Inferred · not functionally tested

Functions: Unknown

Interfaces: API: unknown · MCP: unknown · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)

Recorded constraints: pricing: open_source · license: MIT · platforms: CLI · deployment: cli, self_hosted

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: pypi.org · github.com. These links do not verify the individual claims.

tokenstash sits in PulseGate's Password & secrets management category. Inferred · not functionally tested: It focuses on keeping coding-agent credentials secure and scoped to approved directories without exposing them in command output. Inferred · not functionally tested: It is built as an open-source project for developers using coding agents. Basis unknown · not verified: The project is open source (MIT). Basis unknown · not verified: It ships for the command line, and it can be self-hosted.

It is developed by K. Garg, and it first shipped in 2026. The project is developed in the open on GitHub with 223 commits in the last 90 days. Inferred · not functionally tested: Among its 5 catalogued features are credential storage, directory approval, and API key management.

Summary written by a language model from the project’s public pages.

Tasks: Inferred · not functionally tested

  • Credential storage
  • Directory approval
  • API key management
  • Secret redaction
  • Coding-agent support

Topics: Inferred · not functionally tested

Tags
credential-brokercoding-agentsapi-key-managementdirectory-access-control

JSON profile · Text profile · Access guide

Built with & integrations

Written with
Claude Code
Runs on
CLISelf-hosted
Written with — evidence
Claude Code
commit 53384700c1de · since Sep 2026

Trust & compliance

License
MIT
Public signals
HTTPSOpen SourceFree tierGitHubActive maintenance

Indexing history

1

What PulseGate has recorded for this listing

  1. Indexed13 Sep · 05:23 UTC
    tokenstash seen via PyPI Bulk Enumerator
    Source: PyPI Bulk Enumerator · Open

Frequently asked questions about tokenstash

What is tokenstash?
Inferred · not functionally tested: Tokenstash focuses on keeping coding-agent credentials secure and scoped to approved directories without exposing them in command output. It is catalogued under Password & secrets management on PulseGate.
Who should use tokenstash?
Inferred · not functionally tested: tokenstash is an open-source project built for developers using coding agents.
Is tokenstash free?
Basis unknown · not verified: Yes — tokenstash is open source under the MIT license and free to use.
What platforms does tokenstash run on?
Basis unknown · not verified: tokenstash runs on the command line. It can also be self-hosted.
Is tokenstash still active?
PulseGate's liveness check found it on 14 Oct 2026. Its GitHub repository shows 223 commits in the last 90 days.
Who develops tokenstash?
tokenstash is developed by K. Garg.
How long has tokenstash been around?
tokenstash first shipped in 2026.
Is tokenstash open source?
Basis unknown · not verified: Yes — tokenstash is open source under the MIT license, developed on GitHub.

Similar projects

Closest matches by what these projects do