# trustless

> Credential broker CLI and proxy for AI agents

trustless is a credential broker CLI that isolates AI agents from plaintext secrets. It resolves credentials on demand from existing backends such as pass or Bitwarden, injecting them into subprocesses or through a local HTTP forward proxy while redacting sensitive tokens from command output. It runs locally as a zero-dependency static binary on Linux and macOS.

- Source: https://github.com/ikkun1222/trustless
- License: MIT
- Built with: Go 94.5%, Python 2.8%, Shell 2.4%, Other 0.3%
- Stars: 4
- Forks: 0
- Contributors: 2
- Last commit: 2026-10-20
- Latest release: v0.5.1 (2026-08-14)
- Purpose: AI & LLM tooling, Agent skills, Security & identity
- Type: CLI
- For: Personal
- Enterprise signals: audit log

## Worth score: 47/100

How much DigGitHub recommends it, from activity, adoption, docs, license and security signals.

- Popularity: 3/25
- Momentum: 10/20
- Maintenance: 25/25
- Community: 1/15
- Readiness: 8/15

## Downloads

Latest release: [v0.5.1](https://github.com/ikkun1222/trustless/releases/tag/v0.5.1). Files from the project's GitHub release, not checked by DigGitHub.

macOS:

- [trustless-darwin-amd64](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-darwin-amd64) (12 MB, 0 downloads)
- [trustless-darwin-arm64](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-darwin-arm64) (11 MB, 0 downloads)

Linux:

- [trustless-linux-amd64](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-linux-amd64) (12 MB, 1 downloads)
- [trustless-linux-arm64](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-linux-arm64) (11 MB, 1 downloads)

To check the files: [SHA256SUMS.sig](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/SHA256SUMS.sig), [trustless-darwin-amd64.pem](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-darwin-amd64.pem), [SHA256SUMS.pem](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/SHA256SUMS.pem), [SHA256SUMS](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/SHA256SUMS), [trustless-darwin-amd64.sig](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-darwin-amd64.sig), [trustless-darwin-arm64.pem](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-darwin-arm64.pem), [trustless-darwin-arm64.sig](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-darwin-arm64.sig), [trustless-linux-amd64.pem](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-linux-amd64.pem), [trustless-linux-amd64.sig](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-linux-amd64.sig), [trustless-linux-arm64.pem](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-linux-arm64.pem), [trustless-linux-arm64.sig](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-linux-arm64.sig), [trustless.sbom.spdx.json](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless.sbom.spdx.json), [trustless.sbom.spdx.json.sig](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless.sbom.spdx.json.sig), [trustless.sbom.spdx.json.pem](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless.sbom.spdx.json.pem), [trustless-release.spdx.json](https://github.com/ikkun1222/trustless/releases/download/v0.5.1/trustless-release.spdx.json)

## Alternatives

- [postern](https://diggithub.com/mmartinez/postern.md): Credential-brokering HTTPS proxy for AI agents
- [mcp-warden](https://diggithub.com/ermoluk/mcp-warden.md): Local-first credential broker and MCP server for AI agents
- [Gitleaks](https://diggithub.com/gitleaks/gitleaks.md): Find secrets in code
- [Shannon](https://diggithub.com/KeygraphHQ/shannon.md): AI pentester for your web apps and APIs
- [portunus](https://diggithub.com/mdostal/portunus.md): Boundary-only secret broker keeping credentials out of LLM contexts
- [agent-vault](https://diggithub.com/CrimsonWorks-Inc/agent-vault.md): Local credential proxy for coding agents
- [keyward](https://diggithub.com/arturayupov/keyward.md): Local, encrypted secret broker for AI coding agents
- [agent-vault](https://diggithub.com/Infisical/agent-vault.md): HTTP credential proxy and vault for AI agents

---

Source page: https://diggithub.com/ikkun1222/trustless
Updated: 2026-10-30