TokenHunt — catch secrets at chat time, not commit time

Scanners watch git.
Your keys live in chat.

gitleaks and trufflehog scan history. The transcript is the new leak surface — pastes, file reads, tool output. token-hunt hooks the agent runtime itself, at all six points a secret can enter.

token-hunt watch catching an Anthropic API key leak in real time, then scan reporting the finding with a rotate URL

01 Six hooks. Every entry point.

hook	what it sees	action on leak
`UserPromptSubmit`	your paste	WARN
`PreToolUse:Bash`	command about to run	BLOCK
`PostToolUse:Bash`	command output	WARN + log
`PostToolUse:Read`	file contents	WARN + log
`PreToolUse:Edit/Write`	new file content	BLOCK
`PostToolUse:Edit/Write`	echo	WARN + log

02 Catches what regex can't.

Bash evaluates secrets into emitted text with no literal in sight. token-hunt runs a runtime detector for the escape-hatch class — no other scanner sees it.

BLOCKED

echo ${ANTHROPIC_API_KEY:+SET}
${ANTHROPIC_API_KEY:-UNSET}

both branches run — the value leaks

BLOCKED

echo $GITHUB_TOKEN

direct echo of a secret var

ALLOWED

[ -n "$ANTHROPIC_API_KEY" ] \
  && echo SET

status check — no value emitted

03 Three shapes. One hunt.

01token-huntfree · BUSL-1.1The engine. CLI (scan / list / close / watch), six hooks with block-and-rotate behavior, the allowlist, and the bash escape-hatch runtime detector no regex can see.→02pat-scannerfree · BUSL-1.1The one-command plugin. One hook, 13 credential classes, regex matching. Install it and you're covered. The guard, without the workflow.→03token-hunt-procommercialSilent redaction — the agent never sees the raw value. Active verification — checks whether a found key is actually live against GitHub, Stripe, and Slack. Offline ed25519 licensing. Zero phone-home.→

48 rules · 51 providers built in