This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
Mandu
Keeps your secrets from your AI agent, and keeps it useful
Mandu lets Claude Code, Codex and other AI agents work next to your real API keys and secret files. The AI sees a placeholder; the programs and hosts you allow get the real value. Open source, no root, no account, no changes to your agent.
Hi Product Hunt! I'm Byoungyoung from Mandu Security.
Coding agents read your files as they work: .env, SSH keys, cloud logins. Once a key is read, it rides along in every request to the AI provider, and whatever the agent holds can go to any server a command names. The usual fix is to block the agent from reading .env. That keeps the key home, and the agent can't use it either.
Mandu takes a different route. The AI gets a placeholder, like $MDU:nomodel_Read[9bbd].STRIPE_KEY, that it can pass around and put in a command. When that command goes to a host your rule allows, say api.stripe.com, Mandu fills in the real key on the way out. Anywhere else, the request waits on the dashboard for your OK. You still see the real values in the agent's replies.
A few things we cared about:
• No changes to your agent. Type `mandu claude` or `mandu codex` and you're running. It uses your agent's own login, Claude Pro and Max included.
• Local only. No account, no Mandu server, no telemetry; everything stays in ~/.mandu.
• No root. It runs as your user and adds kernel hardening (seccomp, Landlock) where your kernel allows. When it can't decide, it fails closed.
• Open source, Apache-2.0, built on our research on agent security (DualView, arXiv:2607.03821).
We measured it: 15 everyday tasks with a secret in them (file a bug report, debug a payment error, move a .env to a hosting platform, and more), 3 live runs each with Claude Code. Mandu kept the secret and finished the task in 43 of 44 runs, and in 41 of 45 on a fresh install with no setup. The next best setting managed 27 of 45. We chose the tasks and tuned Mandu on earlier runs of them, so weigh it accordingly; the method and every result are in the repo.
What it doesn't do: with the default protection, Mandu does not defend against prompt injection. A web page can still steer the agent; Mandu guards where your secrets go. It's Linux first, and macOS is experimental.
Two questions for you: which secrets does your agent sit next to that worry you most? And which agent should we support next?
No comment highlights available yet. Please check back later!
About Mandu on Product Hunt
“Keeps your secrets from your AI agent, and keeps it useful”
Mandu was submitted on Product Hunt and earned 2 upvotes and 1 comments, placing #158 on the daily leaderboard. Mandu lets Claude Code, Codex and other AI agents work next to your real API keys and secret files. The AI sees a placeholder; the programs and hosts you allow get the real value. Open source, no root, no account, no changes to your agent.
Mandu was featured in Open Source (69k followers), Developer Tools (521.6k followers), Artificial Intelligence (481.7k followers) and GitHub (41.4k followers) on Product Hunt. Together, these topics include over 270.2k products, making this a competitive space to launch in.
Who hunted Mandu?
Mandu was hunted by Byoungyoung Lee. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how Mandu stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Byoungyoung Lee