zkettle
Self-host expiring secrets encrypted before they reach the server.
- Stars
- 3
- Forks
- 0
- Updated
- Updated Mar 3, 2026
Self-host expiring secrets encrypted before they reach the server.
zKettle encrypts secrets locally and stores only ciphertext, placing the decryption key in the URL fragment so the server never receives it. Links can expire by time or view count and can be revoked early, with CLI and MCP tools for common workflows. Reading through a terminal or agent can expose plaintext to logs or context, so file or clipboard output is safer.
Resource types
Use cases
Platforms
Scan Agent Skills for injection, exfiltration, and malicious code patterns.
Connect to GlobalProtect VPNs on Linux through a CLI or GUI.
Runtime
Protocols & integrations
Capabilities
Public GitHub facts last synced Jul 10, 2026.
Scan Electron applications for insecure settings and implementation anti-patterns.
Scan agent skills with static checks, semantic review, and sandbox execution.