Keyclasp lets AI agents use credentials without exposing secrets in prompts

·3 views

A developer has released Keyclasp, an open-source tool that allows local AI coding agents to use API tokens and credentials without those secrets appearing in prompts or command outputs. The tool stores credentials in a locally encrypted vault, letting agents reference secrets by name rather than value when executing commands. Keyclasp includes an output guard that scans and redacts any injected secret values detected in stdout or stderr, and supports optional operator authorization for unattended runs. Currently available as a beta npm package, it supports Apple Silicon Macs and glibc Linux on arm64/x64 with Node 24 or 26, and is MIT licensed. The developer cautions that the tool has not undergone a professional security audit and does not sandbox commands or fully isolate secrets from other OS-level processes.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

AI Speeds Up Code Generation but Makes Verification Harder, Developers Find

AI coding tools have split developers into two camps — those who feel far more productive and those who abandoned the tools after getting confidently wrong outputs. A key insight from experienced developers is that while generating code has become nearly effortless, verifying that code remains just as demanding as before. The biggest practical gain lies not in writing new code but in quickly understanding unfamiliar or legacy codebases, reducing hours of manual investigation to seconds. However, AI-generated code poses a stealthy review risk: unlike junior developer mistakes, AI errors are stylistically polished and harder to flag on instinct. Teams that adopt these tools without rethinking their code review processes risk shallower oversight and a higher volume of subtle, hard-to-spot bugs reaching production.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Memory Engines Poised to Become Enterprise Infrastructure, Analysts Argue

A vendor analysis published on DEV Community argues that AI memory engines are at the same inflection point relational databases were in the mid-1970s, predicting they will become standard enterprise infrastructure. The piece contends that as AI tools spread across business functions — from sales and customer service to software development — organisations are generating valuable institutional knowledge that currently disperses across chat logs and personal notes with no centralised store. The authors, who disclose they have built their own memory engine called NylonME, surveyed existing public memory solutions and identified four critical gaps: poor write performance and latency, single-user architectures ill-suited to multi-tenant enterprise use, over-reliance on LLMs in the read-write pipeline, and data-sovereignty risks from managed cloud deployments. They argue current products are well-designed for personal AI assistants but break down under enterprise-scale concurrent usage and compliance requirements. The central claim is that enterprises will eventually require a shared, centralised memory layer connecting all AI agents — much as they now rely on a shared database cluster for business systems.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How updating your AWS CLI config can eliminate repeated SSO login prompts

Developers using AWS IAM Identity Center frequently encounter token expiry errors that force them to run 'aws sso login' multiple times a day. The root cause is often an outdated AWS CLI config file that uses a legacy format, which does not support refresh tokens properly. AWS SSO actually relies on two tokens — a short-lived access token (~8 hours) and a longer-lived refresh token (up to 90 days) — where the latter is meant to silently renew the former. The legacy config style repeats SSO settings inside every profile and never shares a refreshable session across them. Migrating to the modern 'sso-session' block in ~/.aws/config centralises session settings, enables refresh token support, and allows a single login command to cover all configured profiles.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Beyond Detection: How Edge AI People Counters Actually Work End to End

Building a functional edge AI people counter requires five distinct stages beyond simple person detection: frame capture, image preprocessing, detection, multi-frame tracking, and conversion of movement into entry or exit events. Each stage introduces potential errors, from uneven frame delivery and resizing artifacts to trackers assigning new IDs mid-doorway, all of which compound into inaccurate final counts. A tracker assigns temporary IDs to keep detections linked to the same individual across frames, enabling a line-crossing algorithm to register a visit only when a tracked path genuinely transitions from one side to the other. Occupancy figures are derived as running state — prior occupancy plus entries minus exits — meaning a single missed event corrupts the count until manually corrected. The article emphasizes that most demos stop at detection and frame-rate display, obscuring the substantial engineering needed before a system can reliably tell a retailer how many visitors entered a store.

0 comments Read more at DEV Community