Show HN: Tokenhush – keeps your secrets out of what Claude Code sends

Category: security

Tags: security, privacy, ai-coding, proxy, redaction

Score: 6.8/10 (Innovation: 6, Technical: 6, Documentation: 8, Utility: 7)

Tokenhush is a local HTTP gateway that intercepts requests from AI coding tools, replaces detected secrets with reversible placeholders before forwarding to the vendor API, and restores them in the response. It supports six detectors, extensible rule packs, and 14 preconfigured tool integrations without MITM or root certificates. The project fills a real security gap for developers concerned about leaking credentials to AI services.

Target audience: developers using AI coding tools, security engineers, DevOps

Repository: https://github.com/fregie/tokenhush · Go · Apache-2.0 · 7 stars

View on Hacker News