Your .env isn't a secret. Tene protects it from AI agents.
All AI coding agents—like Claude Code, Cursor, or Windsurf—access your entire project, including .env files. Your API keys and database passwords are sent in plaintext to AI models. Tene is an open-source CLI tool that locally encrypts your secrets and injects them as environment variables at runtime. AI agents can use them without ever seeing them. Tene is a local-first, encrypted secret manager CLI for developers. It encrypts your secrets and injects them at runtime -- so AI agents can use them without ever seeing the values. The CLI is open-source (MIT license). Cloud features (sync, teams, billing) are available at app.tene.sh via a Pro subscription.
For independent developers managing multiple client projects, Tene enables secure management of distinct API keys and database credentials. Example: A solopreneur can use Tene to store separate Stripe API keys for Client A and Client B, ensuring the AI assistant helping with billing integration only accesses the correct key for the active project context.
For university students using AI coding assistants for assignments, Tene provides a secure way to handle API keys for projects like accessing university databases or external APIs. Example: A student working on a data analysis project can use Tene to store their API key for a weather service, allowing an AI agent to help debug their script without exposing the key in the prompt.
For software developers integrating various third-party services, Tene allows for the secure storage and runtime injection of multiple API keys. Example: A developer building an application that uses both a payment gateway and an email service can use Tene to manage both API keys, ensuring an AI agent assisting with the integration doesn't see either key directly.
For remote developers concerned about the security of their local development environment, Tene encrypts sensitive credentials, preventing AI agents from inadvertently exposing them. Example: A remote developer can use Tene to store their cloud provider's credentials, so an AI assistant helping to set up deployment scripts can access them at runtime without ever seeing the plaintext values.
The Tene CLI tool is free and open-source under the MIT license. It offers unlimited secrets and local encryption. Cloud features like sync and team sharing are available via a paid Pro subscription on app.tene.sh.
The Tene CLI is free to use locally. For cloud synchronization, team sharing, and other advanced features, Tene offers a Pro plan, with pricing details available on their website, app.tene.sh.
You can install Tene by running `curl -sSfL https://tene.sh/install.sh | sh` in your terminal. Alternatively, you can install it using Go or by downloading the binary manually from GitHub Releases.
Tene encrypts secrets locally using XChaCha20-Poly1305 and Argon2id for key derivation, with keys stored in the OS keychain. It makes no network calls by default, enhancing security and privacy. Information regarding specific GDPR compliance for cloud features would be available on their official website.
Tene supports macOS (Apple Silicon and Intel), Linux (x86_64 and ARM), and Windows via WSL. It is designed as a local-first CLI tool.
Alternatives to Tene include tools like Doppler, Vault, and Infisical, each offering different approaches to secret management. The best choice depends on your specific needs for local-first operation, AI integration, and cloud features.
Tene is primarily a local-first CLI tool for desktop operating systems. While the CLI itself does not have a mobile version, cloud features for sync and team sharing are available through their web application at app.tene.sh.
We're still verifying the official pricing for Tene. In the meantime, the most up-to-date plans and prices are available directly on the publisher's website.
Are you the publisher of this tool? to edit this information.
Suggested comparisons in the same category
Or pick another tool
Be the first to leave a review (no signup required)
No reviews yet.
Be the first to share your opinion!
This space lets you connect with other users of the tool: ask questions, share tips and your experience to move forward together.
securite
ClearAudit
PaidAnalyze your website, get a score, and fix issues with AI in minutes
XploitScan
FreemiumSecurity scanner designed for AI-generated code
EML Scanner
FreemiumDetect fraudulent emails in seconds
ClawScan
FreemiumSecurity scanner for OpenClaw skills
UNPWNED
FreemiumAI security scanner for developers and teams shipping AI-generated code - scan, get AI fixes.
GuardLink
FreemiumContinuous threat modeling with AI, enforced in CI.
Safuclaw
FreemiumSecurity audits for AI agent skills. Pay-per-use.
PolicyCortex
PaidAI cloud engineer that automatically fixes security and compliance issues
SolonGate
FreemiumSecurity gateway for AI agents
tryvault.xyz
FreemiumStop exposing your API keys in plain text to AI agents > Use Vault
