#credentials

AI Core

23J1633

Unified AI API configuration and credential management for VS Code extensions

AI Code Exposure Monitor

ConsultantBPMhumansoftware

Live % of your code seen by AI assistants. Detects secrets, passwords, PII exposed to AI tools (Copilot, Claude, Cursor, etc.). 100% local. Works in VS Code, Cursor, Windsurf, VSCodium. MCP + team-work exposure features ready — just ask.

GitHub Guardian

DakshSrivastava

Real-time secret leak detection & SAST vulnerability scanner with inline diagnostics, Quick Fixes, and workspace scanning.

SecretLoader

KiviAS

Pulls secrets from your vault and provides them to your app as environment variables when you run or debug, so they don't have to live in your config files. Works with Infisical, Doppler, HashiCorp Va

Salesforce Settings Migrator

glaisebaby

A VS Code extension that discovers and migrates Salesforce custom settings, custom metadata records, named credentials, and external credentials between authenticated orgs.

SecretGuard — Git Secret Scanner

secretguard

Real-time detection and blocking of API keys, credentials, and secrets before they enter your git history

Entro Security DevGuard

entro-security

Scans for exposed secrets using the Entro Security API.

SecretGuard - Catch Hardcoded Secrets & API Keys

khushwant-r

Flags hardcoded API keys, tokens, private keys, and secrets in your code before they get committed. Catches secrets that AI assistants and quick copy-paste leave behind.

SafePaste

safepaste

Detects secrets in your code on copy/paste and lets you sanitize or restore them — keep your .env files safe when sharing with AI tools.

SecretGuard - Secret Detection

secretguard-cli

Real-time secret detection — catches API keys, tokens, and credentials as you type

Lockzero — Runtime Credential Intelligence

LockZero

Detect hardcoded secrets and proxy bypasses. Move credentials to Lockzero vault with one click. See blast radius, rotation status, and audit lineage on hover.

LeakerLens

Manolov

Catch API keys, tokens, and secrets as you type — 100% locally. Nothing leaves your machine.