SecretPaste – Prevent accidental API key leaks locally

Summary: SecretPaste intercepts paste events in AI chat tools like ChatGPT and Claude to detect and warn users before secrets leave the clipboard. It performs all detection locally without sending data externally, offering a free tier for common patterns and a Pro version with masking and expanded coverage.

What it does

SecretPaste monitors paste actions in AI chat windows and clipboard activity on macOS, detecting secrets such as API keys from OpenAI, AWS, GitHub, and others. It blocks or masks these secrets before they are pasted, ensuring no data leaves the user’s device.

Who it's for

Developers and DevOps engineers who frequently paste API keys or credentials into AI chat tools and want to prevent accidental leaks.

Why it matters

It reduces the risk of unintentionally exposing sensitive credentials caused by habitual pasting during AI tool interactions.