shadowpaste

Let AI code your real repo without exposing secrets

2 followers

Let AI code your real repo without exposing secrets

2 followers

ShadowPaste is a local-first zero-trust MCP gateway that virtualizes secrets, creates AI-safe workspaces, blocks dangerous tool calls, and restores real credentials after AI editing.

Free

Launch tags:Developer Tools•Artificial Intelligence•GitHub

Launch Team

LM-Kit OneThe Private AI Application Server

Promoted

Maker

📌

I built ShadowPaste because AI coding tools need access to real repositories, but real repositories contain secrets. ShadowPaste creates an AI-safe workspace by replacing credentials with format-compatible fakes, gates tool calls through a policy engine, and restores the original secrets afterward. I'd love feedback from developers working with Claude Code, Cursor, and MCP.

Report

1mo ago

Forum Threads

p/shadowpaste

•

1mo ago

Building ShadowPaste in public: Ask me anything about AI security and MCP

Hey everyone

I'm building ShadowPaste, a local-first zero-trust MCP gateway that helps developers use AI coding agents on real repositories without exposing secrets.

ShadowPaste focuses on:

Secret virtualization

p/shadowpaste

•

1mo ago

What is the biggest security problem in AI coding agents?

AI coding agents are getting access to repositories, terminals, databases, and deployment pipelines.

In your opinion, what's the biggest security risk?

Secret leaks

Dangerous tool calls

View all