airlok

airlok is a coding agent for the terminal. It reads, searches, edits, and runs code in your repository with a model from Anthropic or OpenAI (Azure OpenAI included), and it replaces the secrets in every request with placeholders before the request leaves your machine.

The privacy airlock

The conversation stays on your machine in plain text. Each time airlok sends it to the model, it first replaces every API key, token, private key, and other credential it recognises with a placeholder such as <<SECRET_1>>, and the key airlok uses to reach the provider is on that list too. The model reads and writes placeholders. When its reply comes back, placeholders in file edits and commands are swapped back for the real values before anything is written or run, and the terminal shows those values masked. The provider API key is never swapped back into anything. airlok context prints exactly what would be sent, and airlok redactions lists what is detected and how each kind is treated.

Install

Shell script, macOS and Linux
curl -fsSL https://airlok.dev/install.sh | sh
Homebrew
brew install airlok-dev/tap/airlok
npm
npm install -g airlok
Cargo, built from source
cargo install --git https://github.com/airlok-dev/airlok airlok --locked