OSS From the crypto industry, securing wallets since 2025.

Your agent asked for Stripe.
You pasted the live key.

NoEnv keeps the key on this machine. The agent asks for a capability, TypeSafe Jev 1.14 scores it (or a local agent you bring over ACP), you approve, and the secret never enters the chat.

Installer on hold Read the docs View on GitHub
Apache-2.0 · No account · No telemetry · From the crypto industry, securing wallets since 2025.
01 // The request
The agent asks. You answer. Explore
noenv / mcp
Five tools
One snippet, any IDE Explore
Gates 5 steps
Policy, then you Explore
02 // What leaks 0/27 canary surfaces leaked
Pasted into the chat
The key sits in the transcript, the tool log, and tomorrow's rotation.
Something to steal
Asked as a capability
The agent receives the tool result. The key stayed inside vaultd for that one call.
0 keys in the chat
The secret is not a message Explore
03 // The floor Fail closed
A write under a read ceiling dies first

Policy denies it before the model is asked. The warden can narrow a scope or force you to look. It cannot widen one, and it never sees the key.

Secure with the model off Explore
04 // Interactive preview

A request, from the paste to the result.

Pick a step. The buttons are a simulation. Nothing is stored, and no key is real.

noenv / approval
Request path
Simulation Local only

Store the key once

You type it in the app. The field clears. The agent learns the alias and the ceiling, never the value.

Open source, not a plan

The license is the price.

Apache-2.0. The vault, the warden, the MCP server, and the audit log ship together. There is no tier to upgrade into.

The license Apache-2.0
$0 / forever

Fork it, read it, run it without an account.

  • — Vault, warden, MCP, and the desktop app
  • — No account and no telemetry
  • — Keys and cards encrypted at rest, master key wrapped with your passphrase, auto-lock after 15 idle minutes
  • — The canary test fails the build if a secret leaks
  • — Docs, architecture, and the verification notes are in the repo
Read the license
Your machine Windows first
Local / 127.0.0.1

The daemon binds to localhost. The warden defaults to TypeSafe Jev 1.14.

  • — Windows installer, or build from the source
  • — Default warden TypeSafe Jev 1.14 via the TypeSafe API
  • — Or a local agent over ACP. No key. It fails closed
  • — Human approval stays in the app. An agent that tries to approve itself gets 401
  • — Only the listener is localhost-only. The daemon calls out to api.typesafe.ai (the warden) and the connectors you add
Installer temporarily unavailable
05 // Real GitHub Timeline

From Wallet Security to Agentic Vaults

Milestones.

2025

Crypto Wallet Security

From the crypto industry, securing wallets since 2025.

2025–2026 · Ecosystem Shipping Active Portfolio

Shipped Other Consumer Tools

Built and shipped consumer products across trading bots, finance tools, social networks, and games (goodrecmovies, Purrbook, ChessGods, GalaxyUI) hosted on whativedone.xyz.

2026-10-31 · Genesis MVP Genesis

NoEnv MVP: Local Marshal & 5-Tool MCP

Architected the local AES-256-GCM vault daemon (vaultd), deterministic policy ceiling, Model Context Protocol server, secret canary test sweep, and Electron approval shell.

2026-11-02 – 11-07 · Current Sprint Current

TypeSafe Jev & a local agent

Published the NoEnv pitch at noenv.whativedone.xyz. Hardened adversarial prompt defenses (11-02). TypeSafe Jev 1.14 is the default warden (11-07). A local agent over ACP is opt-in. The caller-process check is opt-in and off by default.

Get the vault

Installer temporarily unavailable

Installer downloads are paused while distribution notices are updated. Build from source in the meantime.

Installer temporarily unavailable View source IDE setup 
{
  "mcpServers": {
    "noenv": {
      "command": "node",
      "args": ["<noenv>/dist/packages/mcp/src/server.js"],
      "env": { "NOENV_AGENT_ID": "cursor", "NOENV_IDE": "Cursor" }
    }
  }
}