Every AI coding agent β Claude Code, Cursor, Windsurf β reads your entire project directory, including .env files. Your API keys and database passwords are sent to AI models as plaintext.
Tene is an open-source CLI that encrypts secrets locally and injects them as environment variables at runtime. AI agents can use your secrets without ever seeing them.
