Ts

Tswap–Yubikey-backed secret injection for IaC and AI-assisted workflows

Hacker News

Tswap–Yubikey-backed secret injection for IaC and AI-assisted workflows

I built tswap after noticing that Claude Code, while genuinely useful for managing a Kubernetes cluster, was pulling plaintext secrets from every manifest it touched. I wanted the AI to be able to do its job without ever seeing the actual values. tswap keeps secrets in an AES-encrypted vault file on disk. The decryption key is derived from a YubiKey via HMAC challenge-response. At init you pair two YubiKeys — either unlocks the vault, so you have no single point of hardware failure. Config files use a comment-based placeholder that keeps them valid YAML: stringData: DB_PASSWORD: # tswap: db-password Deployment is a pipe: tswap apply values.yaml | helm upgrade myapp ./chart -f - The privilege split is the key design decision: `apply`, `run`, and `check` need no elevation (AI agent gets these). `get`, `list`, `delete`, and `export` require sudo/admin (human gets these). The AI can deploy; it can't read or enumerate secrets. Other features: burn tracking for rotation, `redact` for stripping values from logs, `check` for pre-deploy validation, `export`/`import` for vault migration. Single binary, no daemon. Tested on Linux, macOS, and Windows. https://github.com/stevedcc/TokenSwap

Visit product View on Hacker NewsFeb 27, 2026

Actual performance

1points

Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →

Product HuntOn track for Day 1 leaderboard · Strong signals: mac, macos, agent · Missing: agents, cursor, model

81%81% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Indie HackersIH features products with proven revenue · Missing: supports, reddit linkedin, podcasting

48%48% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

28%28% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive

27%27% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Hacker NewsMay not resonate with HN audience · Strong signals: pipe, io · Missing: https docs, excited, just released

26%26% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

TrustMRRLess likely to generate early MRR · Missing: mobile apps, ios, personal

24%24% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

0%0% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

AI-Assisted Scratchpad43%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

AI-Assisted Scratchpad

Philologica31%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Traceable AI-assisted manuscript review for researchers

Indie Hackerscommitment-side-project

Philologica30%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Traceable AI-assisted manuscript review for researchers

Indie Hackerscommitment-side-project

Chunavilal – An AI Assisted Election Result Analysis App25%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Chunavilal – An AI Assisted Election Result Analysis App

LexData38%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

AI-assisted legal triage for illegal occupation in Spain

Indie Hackers1$25/moai

LexData14%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

AI-assisted legal triage for illegal occupation in Spain

DAAF – Reproducible AI-assisted data analysis for researchers23%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

DAAF – Reproducible AI-assisted data analysis for researchers

Lervos37%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

AI assisted freelance

Indie Hackers1ai

Kbsecret – A secret manager backed by Keybase and KBFS52%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Kbsecret – A secret manager backed by Keybase and KBFS

ScriptLoom – AI-assisted screenwriting with drafting and voice edits37%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

ScriptLoom – AI-assisted screenwriting with drafting and voice edits

Browse all products Analyze your launch