Keep .env files, keys and certificates in an encrypted local vault. Your code gets them when you run it. Your coding agent never does.
Import a file once and delete it. From then on, your values travel from the vault straight into your process. There is nothing in the project folder for an agent to open.
Any command that reads environment variables works unchanged.
Every item is sealed on import and tied to its exact place in the vault.
Candil looks at the whole chain of processes behind every request. The operating system supplies that information, so a process cannot claim to be someone else. If an agent is anywhere in the chain, the answer is no.
| Who is asking | Development | Production |
|---|---|---|
| You, in your terminal | Allowed while your session is open | A fresh code, every time |
| An AI agent | Denied and logged | Denied and logged |
Codes come from the authenticator app you already use. Each one works once. An agent cannot generate one, and a denied agent request never burns yours.
Agents can still see which variables a project expects, read the audit log and check vault status through a built-in MCP server. They write the code. You keep the keys.
The tool list is fixed. A response carrying a secret is refused before it is ever turned into a reply.
Allowed or denied, each secret-level request is written to a hash-chained log. Change one line and the chain stops verifying.
Envelope encryption with standard RustCrypto libraries. Nothing home-made.
Your recovery passphrase is stretched with a memory-hard function and never stored.
The vault lives on your machine. A small Rust service is the only thing that opens it.
Deploys to your servers over SSH with no plaintext copy on disk. A sealed folder for keys and data files. Shared vaults for teams, where the server never sees a value.
The full vault, agent protection and audit log. For personal, non-commercial use, up to 3 users.
Everything in Personal, for commercial use. Up to 9 users. AI support.
Everything in Startup, from 10 users up. One flat rate with no limit on users. Support from a real person.