#api-keys

Copilot & BYOK Usage Tracker

feima

BYOK usage tracking, cost dashboard, and session analysis for GitHub Copilot & BYOK (DeepSeek, Mistral, OpenRouter, Qwen, Kimi K3, GLM/Z.ai, MiniMax, MiMo). Manage providers visually; browse 100+ AI coding tools.

VibeSafe - Security Scanner

vibesafe-info

Scan your code for security vulnerabilities, exposed secrets, and bugs. Built for vibe coders. Official extension of vibesafe.info

SecretLoader

KiviAS

Pulls secrets from your vault and provides them to your app as environment variables when you run or debug, so they don't have to live in your config files. Works with Infisical, Doppler, HashiCorp Va

Ace Data Cloud MCP

acedatacloud

Manage your Ace Data Cloud account — balance, usage, API keys, orders, and tokens.

SecretGuard — Git Secret Scanner

secretguard

Real-time detection and blocking of API keys, credentials, and secrets before they enter your git history

Entro Security DevGuard

entro-security

Scans for exposed secrets using the Entro Security API.

SecretGuard - Catch Hardcoded Secrets & API Keys

khushwant-r

Flags hardcoded API keys, tokens, private keys, and secrets in your code before they get committed. Catches secrets that AI assistants and quick copy-paste leave behind.

Detect leaked API keys and secrets in your code as you type. Highlights 80+ secret patterns including AWS, GitHub, Stripe, OpenAI, and more.

Lockzero — Runtime Credential Intelligence

LockZero

Detect hardcoded secrets and proxy bypasses. Move credentials to Lockzero vault with one click. See blast radius, rotation status, and audit lineage on hover.

LeakerLens

Manolov

Catch API keys, tokens, and secrets as you type — 100% locally. Nothing leaves your machine.

Canary

yashgoyal

Catch secrets, broken .env hygiene, and insecure code patterns before commit.

SecretScanner — Catch Leaked Secrets

mjethwa-streamlit

Scan your code for accidentally committed API keys, tokens, and secrets before they hit git history.