Heldkeys

Heldkeys is a command-line tool that scans your local environment, sandbox, or continuous integration job to identify credentials accessible to AI agents running there, such as environment variables, cloud CLI logins, developer platform tokens, SSH keys, and .env files, without exposing secrets. It highlights security risks in AI agent workflows and helps developers understand and mitigate credential exposure risks when using AI coding assistants.