See and fix what
AI tools can read.
Offsend is an open-source, local-first CLI that shows what your repo exposes to Cursor, Claude Code, Copilot, or Codex — then locks it down with ignore files and hooks. Desktop, browser, and CI tools extend the same engine.
curl -fsSL https://install.offsend.io/cli | bashFree · Open source (Apache-2.0) · Runs 100% locally · No account
Local-firstNo server-side scanningNo accountOpen source
1 in 3 public repos contain files AI tools should probably ignore.
Offsend Radar tracks AI-context risk signals across public repositories without reading file contents or publishing exact paths.
Exposure rate
37%Repos exposing sensitive paths — plain sight for any AI assistant with repo access.
Path matches
156Sensitive path matches found across scanned repositories.
Top risk categories
- Key material (.pem, .key)60
- Environment files (.env)40
- Key files28
- npm credentials (.npmrc)10
- Backup files5
See what's exposed.
Fix the boundary.
Four local commands: initialize project rules, audit what AI tools can still read, hide required paths with ignore files, then sync so hooks and ignore rules match your config.
offsend initoffsend showoffsend protectoffsend sync
One local engine.
Every surface you work in.
The open-source CLI is the core of Offsend. Desktop, Browser Extension, and GitHub Action bring the same local checks to specific workflows — add the ones that match yours.
CLI
The core product — for terminals, git hooks, and CI.
Audit what AI tools would read, protect exposed paths, sync ignore rules and hooks, block risky commits — and gate prompts, file reads, and MCP calls right in AI editors.
Install CLI
Desktop
For Mac users who prep folders, files, and clipboard text.
Adds Safe Paste, drag-and-drop file preparation, project audits with one-click fixes, and watched folders on top of the bundled CLI.
Download for macOS
Browser Extension
For anyone pasting into ChatGPT, Claude, or Gemini.
The same detection engine in your browser: mask API keys, tokens, and personal data in prompts — before you hit send.
Add to Chrome
GitHub Action
For teams that gate PRs before AI tools read the repo.
The same CLI checks on every PR and push: secrets, missing AI ignore files, and workspace hygiene — before Cursor or Copilot open the branch.
Add to CILocal-first.
By default.
Offsend is built so AI workflows stay private: no server-side scanning, no account wall, and an open-source CLI you can run fully offline.
- Local-firstScans and masking run on your machine — not in our cloud.
- No cloud scanningFile contents and prompts stay with you. Nothing is uploaded for analysis.
- No account requiredCheck a repo, install the CLI, or use the extension without signing up.
- Open Source CLIInspect the code, run it offline, and wire the same checks into CI.
Free for developers.
Team plan on the way.
Offsend stays free and open source for individual developers. The Team plan will add group policies, shared detector dictionaries, and org-wide enforcement in CI — built on the same local-first engine, so code and prompts never leave your machines.
- Group policies
- Shared dictionaries
- Org-wide CI enforcement
- Centralized reporting
Answers
before you start.
Short, honest answers about Offsend.
Missing something? Email us.
What is Offsend?
Offsend is a free, open-source, local-first CLI that helps you see and fix what AI tools can read — in GitHub repos, project folders, and terminal sessions — before secrets and sensitive data leave your control. Companion tools bring the same engine to macOS, the browser, and CI.
Where should I start?
Install the free, open-source CLI (curl -fsSL https://install.offsend.io/cli | bash) and run offsend show to see what AI tools can read in your repo. If you'd rather not install anything, scan a public GitHub repo with Check — no signup required. Add the desktop app, browser extension, or GitHub Action for specific workflows.
Is Offsend free?
Yes. The CLI, browser extension, GitHub Action, and Check are free — the CLI is open source under Apache-2.0. The macOS app has a free tier with an optional Pro upgrade. A Team plan with group policies, shared dictionaries, and org-wide CI enforcement is coming soon.
Does Offsend upload my code or prompts?
The CLI, desktop app, and browser extension run locally on your Mac — they read paths and ignore rules, not file bodies, and never send prompt content to Offsend servers. Check scans a GitHub repo you choose; full file paths stay hidden in the report.
What's the difference between Check, CLI, Desktop, Extension, and the GitHub Action?
The open-source CLI is the core product — it runs the checks from your terminal, git hooks, and CI. The other tools bring the same engine to specific workflows: Check is a free online scan for GitHub repos, the GitHub Action wraps the CLI for pull requests and pushes, Desktop adds Safe Paste and drag-and-drop file preparation on Mac, and the browser extension masks secrets in ChatGPT, Claude, and Gemini prompts before you send them.
What is Radar?
Radar is a separate Offsend product for monitoring AI-related exposure signals. Visit radar.offsend.io for details.
Ready to see what
AI tools can read?
One install command, no account. Run offsend show and see your repo the way AI tools do — then add Desktop, Extension, or the GitHub Action where you need them.
curl -fsSL https://install.offsend.io/cli | bash