🚀 UNIFIED SECURITY SUITE: Web Vault • Chrome Extensions • Windows Desktop EXE • AI Agent MCP Compare Features →
hub Unified Zero-Trust Architecture

One Vault. Endless Workflows.
Six Unified Pillars.

Explore the complete Credential Hub security ecosystem. From seamless browser autofill to universal cookie & session inspection, native Windows desktop background sync, installable Mobile PWA, and autonomous agent MCP pipelines — discover how every tool connects to protect and power your digital identity.

4
Unified Client Pillars
AES-256
Zero-Knowledge GCM
< 200ms
Cross-Sync Latency
47+
Pre-Configured Providers
account_tree Cross-Tool Synergy Pipeline

How All Four Tools Work Together

Credential Hub operates as a distributed zero-knowledge mesh. Every client captures, encrypts, and syncs data to the central BetterBase vault, ensuring changes made in your browser, desktop, or cloud are instantly reflected everywhere.

1
Capture & Autofill
As you browse or log in, Credential Hub CRX auto-detects form fields and injects credentials, while Credential Cookies CRX inspects live tab cookies and session tokens.
Browser Tier
2
Client-Side Encryption
Before transmission, credentials, cookies, and tokens are encrypted locally with WebCrypto AES-GCM-256 using keys derived from your master password (Argon2id/PBKDF2). Plaintext never touches the network.
Security Tier
3
Real-Time Cloud Relay
Encrypted blobs synchronize to the Credential Hub Web & BetterBase API backend (proj_hr33qe), broadcasting instant state updates across all connected clients.
Sync Tier
4
Desktop & Secrets Sync
Credential Hub Desktop executes system-wide browser-free autofill into IDEs and terminals, while Credential Sync manages local auth.env / .env rotations, diffs, and keeps secrets 100% out of GitHub.
Execution Tier
verified_user
Universal Zero-Knowledge Guarantee
Only your master password derived keys can decrypt vault items. No server, employee, or agent can read your stored secrets.
View Feature Matrix →
category Six Interconnected Pillars

Meet the Six Ecosystem Pillars

Each component is engineered for a specialized role in your daily workflow. The Windows EXE bundles two desktop applications, accompanied by two specialized browser extensions, our zero-trust cloud web vault, and a full Mobile PWA.

bolt

Credential Hub Desktop

Windows EXE • App 1 • OS Autofill
Credential-Hub_exe

A browser-free desktop companion that brings zero-knowledge credential autofill to any Windows desktop software without requiring Chrome or any browser extension running.

check_circle Browser-Free OS Autofill: Directly injects credentials into IDEs (VS Code, Cursor), PowerShell, CMD terminals, SSH clients, database GUIs, and native desktop app windows.
check_circle System Tray Resident Daemon: Operates silently in the Windows taskbar tray with instant global hotkeys (Ctrl+Alt+H) for zero-latency summoning.
check_circle Offline Encrypted Vault Cache: Full zero-knowledge access to decrypt passwords, notes, and recovery keys even during complete internet outages.
check_circle Windows Hello & PIN Quick Unlock: Instant hardware biometric and short PIN authorization for seamless desktop pair programming.
code Desktop Repo
sync_alt

Credential Sync

Windows EXE • App 2 • Secrets Sync
Credential-Hub_exe

Built specifically for developers to inspect, detect changes in, and synchronize local auth.env, .env, and secret files while keeping them strictly out of GitHub repositories.

check_circle GitHub Desktop-Inspired UI: Familiar repository switcher, project scanner, and visual Git-style side-by-side diff viewer for environment variables.
check_circle Real-Time Change Detection: Automatically scans nested directories (e.g. .betterbase/auth.env) and highlights added, modified, or removed keys with show/mask toggles.
check_circle Rotation History & Timestamp Tracking: Every commit saves historical rotation timestamps and change logs. Look back at past rotated API keys, dates, and times anytime.
check_circle Push / Pull Secret Lifecycle: Keep .env in your .gitignore. Commit and push secrets to Credential Hub before pushing code to GitHub; pull secrets down on any machine when pulling the repo!
terminal Developer Workflow Guide
extension

Credential Hub Extension

Chrome Extension • CRX 1 • Autofill & 2FA
Credential-Hub_crx

Your zero-knowledge password vault directly in your browser. Features intelligent form autofill overlays, contextual username detection, password generation, and a live 2FA/TOTP authenticator.

check_circle Intelligent Form Autofill Engine: Automatically detects login, signup, and MFA fields without altering web page layouts.
check_circle Live 2FA / TOTP Authenticator: Generates time-based 6-digit one-time codes with real-time 30-second countdown dials.
check_circle Automated Account Bot: Built-in batch account creation engine (create-account-bot.html) for high-speed provisioning.
check_circle Quick Vault Hotkey: Summon your vault instantly from any tab via Ctrl+Shift+Y.
extension Explore Extension Page code Extension Repo
cloud_done

Credential Hub Web Vault

Core Cloud Platform • BetterBase Sync
Credential-Hub_dev

The central command center for your entire credential portfolio. Manage corporate logins, developer API keys, encrypted session tokens, audit logs, and AI agent MCP connections in a zero-trust dashboard.

check_circle Master Web Vault: Full-featured responsive dashboard accessible from any desktop or mobile browser.
check_circle BetterBase API Engine: Real-time PostgreSQL schema sync (proj_hr33qe) with millisecond token relays.
check_circle AI Agent MCP Server Bridge: Exposes secure Model Context Protocol endpoints (/mcp) for autonomous coding agents.
check_circle High-Performance Go Server: Production HTTP daemon with gzip compression, security headers, and SPA routing.
lock_open Open Web Vault code Web Vault Repo
smartphone

Credential Hub Mobile PWA

Mobile PWA • Web App Manifest
mobile.html / Standalone PWA

The complete Credential Hub experience tailored specifically for mobile devices. Configured as an installable Progressive Web App (PWA) with standalone display mode, bottom-bar touch navigation, and offline biometric security.

check_circle Dedicated Mobile Web Layout: Built with a dedicated touch-first interface at /mobile.html designed for one-handed smartphone operation.
check_circle Installable Progressive Web App: Add to Home Screen on iOS (Safari) and Android (Chrome) for full-screen native app performance.
check_circle Touch Biometric & Face ID: Rapid biometric unlock support (WebAuthn / Touch ID / Face ID) for safe instant access on the go.
check_circle Offline Encrypted Cache: Service Worker storage keeps passwords, 2FA codes, and notes accessible even during cellular dead zones.
smartphone Launch Mobile App (/mobile.html) install_mobile PWA Setup Guide
view_quilt Core Architectural Engines

Four Specialized Security & Authentication Engines

From categorizing complex corporate logins and continuous session token health checks to GitHub repository secret syncing and high-speed TOTP 2FA authentication — discover the dedicated engines powering your unified vault.

manage_accounts

Credential Manager

Security Check & Priority Account Recovery Hub
Website • EXE • Extension

A purpose-driven directory for organizing credentials by site role (Email, Banking, Cloud, Dev, Social). Provides instant credential quick-views, verified password reset and recovery links with 1-click launch, and an embedded Recovery Priority Sequence Guide.

folder Credential Manager • Security Check
search Search sites... add Add Category add_link Add Site
Email 17
Banking
Cloud Storage
Social Media
Developer & Dev
Crypto & Web3
Email Gmail
edit Edit Site
Official Website
https://mail.google.com open_in_new
Reset / Recovery URL
https://accounts.google.com/signin/recovery Go to Reset Page ↗
Google's free email service offering ample storage, powerful search capabilities, and seamless integration.
vpn_key Stored Credentials (1) + Add Credential
verified_user
Recovery Priority Sequence Guide: Triage primary email first → Single Sign-On (SSO) → Financial & Banking → Cloud & Hosting.
check_circle Hierarchical Purpose Organization: Structure entries across 12+ categories (Email, Banking, Cloud, Dev, Social) with instant multi-attribute search.
check_circle 1-Click Password Reset URLs: Pre-indexed recovery endpoints for popular providers let you jump directly into account recovery with zero friction.
check_circle Recovery Priority Sequence Guide: Embedded triage protocol guiding users on which credentials to recover first during suspected breaches.
check_circle Cross-Platform Quick View: Instant credential inspection and copy actions on Web, Windows Desktop EXE, and Chrome Extension.
lock_open Open Credential Manager help_outline Recovery Guide
cookie

Session Tokens

Central Identity Broker • Credential Cookies
Credential Cookies CRX • Web • EXE

A real-time command dashboard for monitoring all authenticated sessions and cookies distributed via Cloudflare KV and BetterBase. Tests token validity on demand or automatically, tracking active vs. expired accounts and expiration dates.

vpn_key Central Identity Broker
cloud Google Drive code GitHub bolt TEST ALL sync SYNC BROKER
public Google ACTIVE
Accounts: 288 • Keys Loaded: 7 Active
Keys Expired: 0 • Rotated: Today
play_arrow Test Keys
chat Twitter / X STANDBY
Accounts: 223 • Keys Loaded: 0 Active
Keys Expired: 0 • Rotated: --
play_arrow Test Keys
video_library TikTok STANDBY
Accounts: 69 • Keys Loaded: 0 Active
Keys Expired: 0 • Rotated: --
play_arrow Test Keys
movie Netflix STANDBY
Accounts: 19 • Keys Loaded: 0 Active
Keys Expired: 0 • Rotated: --
play_arrow Test Keys
check_circle Global "TEST ALL" Health Check: Ping all saved accounts with a single click or periodic background cron to catch expired session tokens early.
check_circle Individual Provider Test Keys: Validate cookies per service (Google, Netflix, TikTok, AMC+, Instagram, Facebook, X, YouTube, Amazon).
check_circle Expiration & Rotation Timestamps: Track exact expiration dates and last rotated timestamps across 15+ streaming, social, and cloud providers.
check_circle Credential Cookies Integration: Pairs with Credential Cookies CRX for zero-touch capture and seamless session restoration.
sync Launch Broker Dashboard extension Get Cookies CRX
folder_special

Secrets Manager

Credential Hub.exe • Credential Sync
Desktop EXE • GitHub Sync

The GitHub Desktop-inspired secrets management engine. Synchronize, commit, push, and pull encrypted auth.env, .env, and project credentials across 331+ GitHub repositories while keeping secrets 100% in your gitignore.

terminal KayWat GitHub Repositories
331 Repos • 2393 Secrets file_download Export All (.env) add New Secret
code Credential-Hub_dev Private 34 Secrets • VAULT
ACCOUNT MEMBER_ID MEMBERSHIP_TIER SUBSCRIPTION_STATUS +30 more
Zero-knowledge enterprise vault & secrets manager web app
desktop_windows Credential-Hub_exe Private 41 Secrets • VAULT
ACCOUNT MEMBER_ID MEMBERSHIP_TIER SUBSCRIPTION_STATUS +37 more
Electron distribution & local auth.env synchronization engine
extension Credential-Hub_crx Private 33 Secrets • VAULT
ACCOUNT MEMBER_ID MEMBERSHIP_TIER +29 more
check_circle Repository-Centric Secrets Browser: Inspect and manage environment secrets organized cleanly across 331+ individual GitHub repositories.
check_circle Commit, Push & Pull Engine: Save variable changes to Credential Hub, commit with author timestamps, and pull to bring them back on any workstation.
check_circle Multi-Key Tag Classification: Categorize variables using standardized badges (ACCOUNT, MEMBER_ID, SUBSCRIPTION_STATUS).
check_circle Zero Git Leakage: Secrets stay safely in your .gitignore and out of GitHub commit histories while syncing everywhere.
timeline Dev Sync Workflow
lock_clock

Authenticator (TOTP)

Live 2FA Generator • Single Source of Auth
Extension • Website • EXE

Your single source for everything authentication. Save TOTP authentication keys (via Base32, file import, or paste) and generate live 6-digit codes within the 30-second window, enabling seamless 1-click copy and browser form autofill.

dialpad Credential Hub Authenticator (TOTP)
48 Accounts + Single Key description Import File content_paste Paste
Google
024 475
5s
content_copy delete
Google
635 845
5s
content_copy delete
Twitter / X
@WOKEGamerz
424 001
5s
content_copy delete
key Secret Key: JBSWY3DPEHPK3PXP (Base32) Save to Vault
check_circle Live 30-Second Countdown Dials: Visual circular timer indicates remaining validity for active 6-digit TOTP codes before refresh.
check_circle Seamless Browser & EXE Autofill: The extension and Windows app auto-detect 2FA token prompts and fill active passcodes instantly.
check_circle Multiple Key Ingestion Formats: Input manual Base32 secret keys, import authenticator export files, or paste raw backup tokens.
check_circle The Single Source of Authentication: Replaces disconnected authenticator apps by unifying logins, cookies, secrets, and TOTP 2FA in one vault.
timer Open TOTP Authenticator extension Extension Autofill
security Developer Security Architecture
verified Zero Secret Leakage into Git History

How Developers Benefit: The GitHub Desktop-Inspired Secrets Workflow

Hardcoding API keys or committing auth.env / .env files to git repositories is one of the leading causes of security breaches. Credential Sync (packaged inside the Windows EXE) gives developers a native, Git-inspired workflow to store, track change history, rotate keys with timestamps, and keep secrets 100% out of GitHub.

1
Declare in .gitignore
Add auth.env, .env*, and secret tokens to your project's .gitignore. Git and GitHub will completely ignore these files.
Project Level
2
Detect Changes & Diffs
Credential Sync's local file watcher continuously scans your repo. When you edit a variable or rotate a token, it displays a side-by-side Git-style visual diff with color coding.
Change Watcher
3
Log Rotation & Timestamp
Every save or "Commit" records the exact date, time, and author of the rotation. You can look back at past rotated keys and inspect audit timestamps anytime.
Rotation History
4
Push to Credential Hub
Click "Push" in Credential Sync before pushing your code. Your secrets are encrypted client-side and safely stored in your Credential Hub vault—never in git commits.
Vault Sync
5
Pull to Work Anywhere
When you or a teammate pull the repo from GitHub to work on it, hit "Pull" in Credential Sync to instantly rehydrate the exact auth.env secrets onto the machine.
Clean Pull
hub
One Desktop Installer, Complete Protection: Get system-wide browser-free autofill for your everyday logins + Credential Sync for your developer repos.
smart_toy AI Agent & IDE Protocol Bridge
terminal Full MCP (Model Context Protocol) & CLI Support

Connect Your IDE & Autonomous Agents to Credential Hub via MCP & CLI

Credential Hub eliminates the risky practice of typing passwords into chat prompts or uploading sensitive .env files to LLM contexts. With native Model Context Protocol (MCP) endpoints, headless command-line tools (credential-hub.bat / cli.js), and secure REST APIs, your IDE (Cursor, VS Code, Windsurf, Antigravity) and AI agents can seamlessly fetch credentials, synchronize secrets, and authenticate for you in automated testing or tasks.

code
Natural Language Secret Syncing in Your IDE
Instruct your IDE or coding agent: "Pull the auth.env for this project from my Credential Hub" or "Commit and push my rotated Stripe keys". Through MCP and local CLI, the IDE executes secure pulls, commits, and pushes directly with your vault. Never attach raw secret files to an AI prompt again.
check_circle Zero Plaintext in Chat History
login
Zero-Exposure Agent Logins & Testing
When delegating web navigation, QA runs, or automated browser testing to AI subagents or skills, the agent queries Credential Hub via /mcp for authorized account credentials. The agent fills the login form, completes authentication, and carries out the task autonomously—without you ever typing or revealing your credentials.
check_circle Scoped Ephemeral Credentials
cookie
Live Session Cookie Relay & MFA Bypass
Cookies captured by Credential Cookies CRX and vaulted in Credential Hub can be fetched via MCP or CLI by autonomous test runners (Playwright, Cypress, Puppeteer, browser agents). The agent injects authenticated cookies into its session, bypassing CAPTCHAs, MFA prompts, and complex login obstacles during tests.
check_circle Instant Authenticated State
IDE Agent Console • Model Context Protocol & CLI Bridge
Status: CONNECTED (hr33qe)
user > "Agent, pull the auth.env for project JustShop-dev and run integration tests for checkout."
[MCP: credential_hub.pull_secrets] Invoking local Credential Hub CLI engine for target repository: JustShop-dev
[CLI: credential-hub pull] Decrypted and pulled 14 environment secrets from vault (auth.env, .env.local). Rotation hash: #8b72e1 (Timestamp: Today, 04:12)
[MCP: credential_hub.get_session_cookies] Injecting authenticated session cookies for checkout QA testing...
agent > "Environment secrets successfully pulled to local project (kept in .gitignore). Authenticated session injected into test runner. Running checkout suite without exposing passwords..."
api Ready to connect your AI agent or IDE? Use endpoint: https://betterbase-api.kaywat.codes/mcp or run credential-hub.bat
smart_toy Agent MCP Endpoint menu_book CLI & MCP Specs
table_chart Side-by-Side Analysis

Ecosystem Feature Comparison Matrix

Compare capabilities across the Cloud Platform, Chrome Extensions, and Windows Desktop App to see what each component handles best.

Capability & Feature
Web Vault
Cloud
Vault CRX
Extension
Cookies CRX
Extension
Desktop EXE
Windows
Zero-Knowledge Encryption
Client-side AES-256-GCM encryption before sync		 check Yes check Yes check Yes check Yes
Password & Credential Storage
Manage usernames, passwords, passkeys, and recovery keys		 check Full check Full — check Full
In-Browser Form Autofill
Automatic credential discovery & field overlay injection		 — check 1-Click — —
Session Cookie Inspection & Editing
Live DevTools and Side Panel cookie manager		 — — check Native —
Netscape & JSON Cookie Export
Standard developer export formats for curl & scripts		 — — check Yes —
2FA / TOTP Authenticator Engine
Time-based one-time passwords with countdown clock		 check Yes check Live Fill — check Yes
Automated Account Creation Bot
Automated form submission and provider provisioning		 check Yes check Built-in — check Yes
Offline Vault Access
Access and decrypt secrets with zero internet connection		 Cached PWA check Local check Tab Cookies check Native Full
System Tray Background Daemon
Resident background sync in OS notification area		 — — — check Yes
Global Hotkey Activation
Summon vault anywhere across windows or tabs		 — check Browser check Side Panel check OS-Level
AI Agent MCP Server Integration
Scoped credential vaulting for autonomous coding agents		 check /mcp API — Bridge check Local IPC
System-Wide Browser-Free Autofill
Autofill into IDEs, terminals, PowerShell & native desktop windows		 — Browser Only — check Global OS
GitHub Desktop-Inspired .env & auth.env Manager
Scan, manage, and vault secret files across local projects		 Cloud Notes — — check Credential Sync
Secret Change Detection & Visual Git Diffs
Real-time file watcher with side-by-side added/modified/removed key diffs		 — — — check Real-Time Watcher
Key Rotation History & Timestamp Logs
Audit logs recording exact date and time of secret rotations		 Audit Log — — check Full History & Timestamps
Git Repository Leak Protection (.gitignore Workflow)
Keep secrets in .gitignore, sync to vault, push clean code to GitHub		 Manual — — check Commit / Push / Pull
Command-Line Interface (CLI) Automation
Headless terminal commands for scripts, CI/CD & subagents		 REST API / cURL — — check Native CLI (credential-hub.bat)
Autonomous Agent Account Logins & Testing
Zero-exposure credential & cookie injection for AI agents & tests		 check /mcp Scoped API check Browser Autofill check Live Cookie Bridge check Local MCP & CLI Relay
IDE Natural Language Secret Sync (Commit/Push/Pull)
Instruct Cursor/VS Code to pull .env or push secrets to vault		 Cloud Endpoint — — check Full Native MCP & CLI
Primary Operating Environment
Where the software runs		 Any Modern Web Browser Google Chrome MV3 Google Chrome MV3 Windows 10/11 x64
Action & Access Link
Direct button to get or use tool		 Open Vault Install CRX Cookies CRX
tune Operational Workflows

Who Handles What: Real-World Scenarios

See how the tools hand off tasks in daily engineering and security workflows.

login Everyday Secure Authentication

Frictionless In-Browser Web Logins

When you navigate to any website (e.g., GitHub or AWS Console), the tools execute a seamless handoff without you opening a separate password window.

Credential Hub CRX: Detects login form, verifies origin, and displays inline badge overlay.
Client Decryption: Vault unlocks credentials with master session key; fills credentials in 1 click.
2FA Verification: Copies the live TOTP 6-digit code automatically to clipboard or autofills MFA.
terminal Developer & QA Session Token Vaulting

Capturing & Preserving Active Sessions

When testing auth flows or extracting session cookies for automated API calls and curl scripts.

Credential Cookies CRX: Opens Chrome Side Panel and grabs active tab session cookies.
Direct Vault Sync: Clicks "Sync to Vault" -> encrypted and saved to Credential Hub session tokens.
Desktop & Cloud Access: Desktop EXE and Web Vault immediately display the fresh token with expiration tracker.
bolt System-Wide Browser-Free Autofill

Autofilling IDEs, Terminals & Desktop Software

When logging into database GUIs, terminal SSH connections, or desktop software with zero browser windows open.

Global Hotkey: Press Ctrl+Alt+H over VS Code, PowerShell, or any native window.
Tray Daemon: Credential Hub Desktop summons the quick selector instantly from the Windows system tray.
Direct OS Injection: Autofills credentials and 2FA tokens into native fields without browser involvement.
smart_toy Autonomous AI Agent Workflows

Autonomous Agent Credentials via MCP

When AI assistants or coding agents need database connection strings, API tokens, or login sessions to execute tasks.

Agent Queries MCP: AI subagent requests scoped API credential from /mcp.
Role Authorization: BetterBase backend validates agent permissions and access tier in real time.
Ephemeral Access: Ephemeral token provided without ever disclosing or logging your master password.
code Git & GitHub Secret Protection

Preventing Secret Leaks with Credential Sync

When developing locally with sensitive API keys and rotating environment tokens across GitHub repositories.

.gitignore Shield: auth.env and .env stay strictly ignored so Git never stages them.
Diffs & Rotation Logs: Credential Sync watches changes, visualizes key-value diffs, and saves rotation timestamps.
Push to Vault, Clean to Git: Secrets sync to Credential Hub before pushing code safely to GitHub via GitHub Desktop.
help_outline Frequently Asked Questions

Frequently Asked Questions

Common inquiries regarding the tools, installation, synchronization, and security guarantees.

Do I need to install all four tools to use Credential Hub? expand_more
No. Each tool functions as an independent, fully-featured client. You can use solely the Web Vault for cloud password management, add the Chrome Extension for browser autofill, use the Cookies Extension for developer sessions, or run the Windows Desktop EXE for offline resilience. They become even more powerful when used together.
How does zero-knowledge encryption protect data between tools? expand_more
Every piece of sensitive data (passwords, cookies, notes, recovery seeds) is encrypted on your local device using AES-256-GCM before it ever leaves your machine. The decryption keys are derived strictly from your master password using Argon2id/PBKDF2. Our cloud servers, BetterBase databases, and relay APIs only store encrypted ciphertext and cannot read your data.
Can both Chrome Extensions run simultaneously in the same browser? expand_more
Yes, absolutely! Credential Hub CRX handles password autofill and 2FA authentication, while Credential Cookies CRX runs in your Chrome Side Panel or DevTools for cookie inspection. They are built to complement each other and share the same secure session bridge.
What is included in the Credential Hub Windows Desktop EXE? expand_more
The installer (Credential-Hub-Setup-x64.exe) is a single unified executable package that installs two dedicated power applications:
  • Credential Hub Desktop: A system-wide, browser-free credential manager and autofill client that operates silently in the Windows system tray and fills credentials across native apps, IDEs (VS Code, Cursor), and terminals via global hotkeys (Ctrl+Alt+H).
  • Credential Sync: A GitHub Desktop-inspired secrets manager built specifically for developers to scan local repositories, detect changes in auth.env and .env files, log rotation timestamps, and push/pull secrets to your encrypted Credential Hub vault.
How does Credential Sync prevent developers from leaking secrets into GitHub? expand_more
By combining your local .gitignore with Credential Sync's Commit & Push engine:
  1. You keep auth.env and .env declared in .gitignore so Git never tracks them.
  2. Credential Sync's local file watcher detects your changes, displays visual Git-style diffs, and logs the exact rotation timestamp.
  3. Before pushing your code to GitHub, click "Push" in Credential Sync to vault your secrets into Credential Hub.
  4. Then push your clean codebase to GitHub via GitHub Desktop without fear of leaking API keys.
  5. Whenever you or a coworker pull the repo on another machine, click "Pull" in Credential Sync to rehydrate the exact environment secrets directly from Credential Hub.
How do AI agents and IDEs use Credential Hub via MCP and CLI to manage secrets and log in automatically? expand_more
Credential Hub exposes standardized Model Context Protocol (MCP) endpoints (https://betterbase-api.kaywat.codes/mcp) and local CLI commands (credential-hub.bat / cli.js) that connect directly to your IDE (Cursor, VS Code, Antigravity, Windsurf) and autonomous agents:
  • IDE Secret Sync: You can simply tell your IDE in chat: "Pull the auth.env for this project from Credential Hub" or "Commit and push my rotated keys". The IDE securely syncs with the vault without you ever typing keys or attaching secret files to prompts.
  • Zero-Exposure Agent Authentication: When you assign tasks to AI agents or testing skills (e.g., running integration tests or browser automation), the agent queries Credential Hub for the required account login or live session cookies. It logs in and performs actions autonomously without exposing your master password or plaintext credentials in chat history.
Where can I download the Windows Desktop installer? expand_more
The official Credential-Hub-Setup-x64.exe installer is currently undergoing final quality testing and security validation. Once the release phase is concluded, it will be downloadable directly from this page. In the meantime, you can inspect the open-source Electron build script in the Credential-Hub_exe repository.

Ready to Unify Your Security?

Experience zero-trust credential vaulting across web, browser extensions, and native desktop. Choose your platform or get started free with the web vault in seconds.

lock_open Open Vault Dashboard extension Chrome Extensions Suite