EnigmAgent is a local encrypted vault that resolves {{PLACEHOLDER}} secrets at runtime — so LLMs never see real API keys. AES-256-GCM + Argon2id. Zero cloud. Works with Claude, Cursor, Continue.dev, Cline, Open WebUI.
Security should be invisible, not inconvenient.
Everything stays on your machine. The vault file never leaves your filesystem. No servers, no accounts, no data collection.
AES-256-GCM for data at rest. Argon2id for key derivation. Your secrets are as safe as your OS.
Agents only see {{OPENAI_KEY}}, never the real key. Resolution happens at the HTTP boundary, not in context.
MCP server for Claude Desktop. VS Code extension. CLI tool. Integrations for LangChain, LlamaIndex, CrewAI, n8n.
npx enigmagent-mcp and you're running. Or install the VS Code extension. Or just use the CLI.
MIT licensed. Read the code. Audit the crypto. No black boxes. Trust through transparency.
// Agent prompt — the LLM sees this:
curl -H "Authorization: Bearer {{OPENAI_KEY}}" https://api.openai.com/v1/chat/completions
// EnigmAgent resolves at runtime — the real key never enters the LLM context:
curl -H "Authorization: Bearer sk-abc123..." https://api.openai.com/v1/chat/completions
EnigmAgent is one agent in a decentralized network of 14 autonomous research agents.