Hi Product Hunt! I'm the maker of Tene. I built Tene because I realized every AI coding assistant I use — Claude Code, Cursor, Windsurf —reads my entire project, including .env files. My API keys were being sent to AI models as plaintext. That felt wrong. Tene solves this with a simple idea: encrypt secrets locally, inject them at runtime. The AI agent gets the environment variables it needs, but never sees the actual values. What makes Tene different from Vault, Doppler, or Infisical: - No server required — everything runs locally - No signup — just tene init and you're done - AI-aware — auto-generates context files so AI editors know to use tene run instead of reading .env - Free forever — MIT open source I'd love your feedback — especially if you're using AI coding tools daily. What's your current approach to keeping secrets safe from AI agents? How it works: 1. tene init — creates an encrypted vault and auto-configures AI editor rules 2. tene set STRIPE_KEY sk_test_xxx — stores secrets with XChaCha20-Poly1305 encryption 3. tene run -- claude — injects secrets as env vars, AI never sees values Why Tene over .env? - Secrets encrypted at rest with XChaCha20-Poly1305 - Master key stored in OS keychain (macOS Keychain, libsecret) - Auto-generates context files for 5 AI editors (CLAUDE.md, .cursor/rules, etc.) - Multi-environment support (dev, staging, prod) - .env migration in one command: tene import .env - 100% offline, no signup, no server, no telemetry Free and open source. MIT licensed. Setup takes 90 seconds.

Tene

Your .env is not a secret. Tene hides it from AI agents.

Your .env is not a secret. Tene hides it from AI agents.