Contextia — Contextia

Contextia is a local, privacy-first guard that flags secrets in the chat composer
before they ever leave your machine.

Developers paste code, logs and configs into AI chats every day, and those often
contain live API keys, tokens, private keys and connection strings. Contextia
catches them at the moment of typing or pasting, entirely on your device.

What it does:
• Detects over 80 kinds of credential, covering cloud provider keys, source
control and package registry tokens, payment and messaging service keys, AI
provider keys, PEM private keys, .env secrets, database connection strings
and JWTs.
• Optionally flags personal data as well: card numbers validated by checksum,
IBANs and national identifiers. Off unless you turn them on.
• Explains why each match was flagged, so it is never a mystery.
• Underlines the offending text and offers Redact, Allow once, Allow all, or
Allow this pattern always.
• Lets you add your own values and regular expressions to always redact.
• Four modes: Warn, Auto-redact before sending, Block until resolved, or Off.
• Keeps a local detections log and counters on your device. Never the secret
value itself.

Privacy by construction:
• Nothing leaves your machine. No accounts, no servers, no telemetry, no third
parties.
• Zero network requests by default. You may optionally mirror catch counts,
never the secret, to a dashboard on your own machine over loopback. It is off
unless you enable it and refuses any address that is not loopback.
• Runs only on the AI chat sites listed in the permissions, and requests no
other access.
• Open source under the MIT licence. Audit every line:
https://github.com/sbr0nch/contextia

Contextia is a safety net, not a guarantee: rule-based detection can miss things,
so treat it as a guardrail, not proof that a paste is clean.