Revoke

Revoke boosts developer security by giving visibility into what local tools can access on your machine. Key features include: • Local-first security for coding tools, MCP servers, and CLIs • Reveals access to configuration files, SSH material, cloud credentials, and project secrets • Plant fake canary secrets for safe testing • Generates sanitized reports for team review • No account required for free scans This tool helps engineering teams understand and manage the security perimeter shift caused by new coding assistants. It allows you to create safe, controlled scenarios to test tool access without exposing real credentials. By planting fake secrets and running probes, you can observe exactly which paths and sensitive data are reachable by various developer tools. The generated reports provide a clear, sanitized overview, making it perfect for security audits and team discussions. Revoke focuses on risk discovery across your local toolchain, identifying potential permission issues, plaintext secrets, and extension risks. It’s an essential utility for developers and security teams looking to enhance their local security posture and maintain control over sensitive data in evolving development environments.