Open Source · MIT License · 100% Local · No account · Free
Agent Redactor
Your AI agents never see your secrets. Agent Redactor is a free Windows desktop app that sits between your AI coding agents and their LLM endpoints as a local proxy redacting PII, credentials and proprietary data from every request, and transparently restoring the original values in every response.
Prefer not to use the Microsoft Store? Enter this in PowerShell:
iex "& { $(irm https://api.agentredactor.negativestarinnovators.com/install.ps1) }"
How it works
A transparent firewall for your AI traffic. Your tools talk to localhost. Agent Redactor does the rest.
Your Agent
Claude Code, Codex, OpenClaw, OpenCode, Hermes, your IDE
Agent Redactor
Redacts PII, regex & keyword matches before anything leaves your machine
LLM API
OpenAI, Anthropic, OpenRouter or any OpenAI-compatible endpoint
-
Redact on the way out.
A local ONNX AI model detects PII (names, emails, phone numbers, credentials and more),
while your own regex rules and keyword lists catch project-specific secrets.
Values become
<<REDACTED_PII_1>>style labels. - Forward safely. Only the scrubbed request leaves your machine, with your real API key injected locally at the last moment.
- Restore on the way back. Labels in the response even when split across streamed SSE chunks are transparently replaced with the original values. Your workflow never breaks.
Why Agent Redactor?
Trust is verified, not given. Everything runs on your hardware. Neither we nor any third party ever sees your redactions or your LLM traffic.
On-Device AI Detection
A local ONNX model (CPU, CUDA or DirectML) identifies and redacts names, emails, credentials, account numbers and more. You control the categories and confidence threshold.
Deterministic Regex Rules
Total control for project-specific data: block internal IPs, proprietary hostnames, customer IDs or unique secret formats with your own patterns.
Keyword Redaction
Strict, exact-match blocking for specific words, phrases, project names or anything that must never reach a cloud provider.
Seamless Un-Redaction
Responses are reconstructed automatically including streaming SSE, where redaction labels split across chunks are pieced back together perfectly.
Keys Stay Local
Real upstream API keys are stored with Windows DPAPI (optional AES-256-GCM master password) and injected only into the redacted outbound request.
Open Source & Auditable
MIT licensed, native C++/WinUI 3, no WebView, no telemetry. Audit every line on GitHub and verify exactly what leaves your machine.
Unlimited Profiles
Isolated environments per client, provider or project. Each profile has its own local port, upstream endpoint, rules, stats and logs.
Granular Visibility
Inspect session redaction logs to see exactly what was matched and blocked before it hit the network, with per-profile statistics.
Localized in 53 Languages
A native WinUI 3 interface with system tray integration, start-on-boot, and full RTL layout support in 53 languages.
Quick start
Up and running in under two minutes.
- Create a profile and assign it a local port, e.g.
8081. - Enter the upstream API endpoint, e.g.
https://api.openai.com/v1. - Save your real API key in the profile. It is encrypted and never leaves your machine.
- Point your AI agent or IDE at
http://localhost:8081with any dummy API key. - Enable PII categories, regex rules and keywords to match your project.
- Check the session redaction logs to verify your data is being scrubbed.
Documentation
Step-by-step setup guides for popular AI coding agents. We are preparing detailed, screenshot-backed walkthroughs for each tool.
Claude Code
Route Anthropic's Claude Code CLI through a local Agent Redactor profile.
Instructions coming soonCodex
Use OpenAI's Codex CLI with redacted outbound traffic and local key injection.
Instructions coming soonOpenClaw
Point OpenClaw at a localhost profile for fully scrubbed LLM calls.
Instructions coming soonOpenCode
Configure OpenCode's provider endpoint to proxy through Agent Redactor.
Instructions coming soonHermes
Set up the Hermes agent with a dedicated profile, port and upstream.
Instructions coming soonAny OpenAI-Compatible Tool
Any agent that lets you set a custom API base URL works today: point it at http://localhost:<port> and use a dummy key. See the quick start.
Support the project
Agent Redactor is free and open source. If it saves you from a leaked secret, here are a few ways to give back. Every one of them helps.
Contact
Questions, feedback, enterprise needs, or a bug to report. We would love to hear from you.