← All work2025 · Open source
Misty
Open-source scanner that finds leaked credentials and PII in Claude Code transcripts, configs and .env files. Runs locally.
What it does
Scans Claude Code transcripts, config files and .env files on your machine
for leaked secrets and personal data. Everything runs locally; nothing is
uploaded.
How it separates real keys from noise
A rules engine with a JWT-decoding confidence layer tells live keys apart from decoys and placeholders, so the report is short enough to act on.
Results
Surfaced real critical leaks in production transcripts, including a Supabase
service_role key and a Postgres password.