Cred

Cred offers a robust credential delegation system designed to secure application access to user accounts. Key features include: • Encrypted refresh token storage (AES-256-GCM) • On-demand, short-lived access tokens for applications • Cryptographic audit receipts for every token delegation • Complete self-hosting with zero cloud dependencies • CredX for simplified encrypted credential storage This system addresses the critical security challenge of storing user OAuth tokens, which are often left vulnerable in plaintext configurations. Cred ensures that sensitive refresh tokens are encrypted at rest and never exposed to the agents requesting access. Instead, applications receive temporary access tokens, significantly reducing the risk of credential compromise. Designed for developers building applications that require secure access to third-party services like Google, GitHub, and Slack. Cred handles the complexities of OAuth flows, PKCE, and token exchange, allowing developers to focus on core product functionality. The system also provides instant revocation capabilities and a verifiable audit trail with Ed25519-signed receipts, ensuring transparency and control over access. Ideal for engineering teams prioritizing data security and compliance, Cred allows for a secure integration with existing authentication providers while maintaining strict control over user credentials.