Give a project command the secrets it needs without pasting them into your coding agent's conversation or another .env file.
When an agent needs a key, it asks Latch to launch a command with that named secret. A small desktop popup shows the project, environment, and exact command. You can enter a missing value, approve one launch, or deny the request. The main app stays in the tray until you need to manage your vault.
Latch is open source and local only. It uses Tauri 2, React, TypeScript, Rust, and SQLite.
pnpm dlx skills add Serendeep/latch --skill latch --globalThe installer detects Codex, Claude Code, and other compatible agents. Start a new agent session after installation. You can review the complete skill before installing it.
Codex connects a private issue dashboard. Claude adds an issue filter, and T3 Code adds title search. Each video follows the task through Latch approval to the running dashboard.
Codex — connect the project
latch-codex.mp4
Claude Code — add an issue filter
latch-claude-code.mp4
T3 Code — add title search
latch-t3-code.mp4
The recordings use the actual agent applications, a local mock GitHub service, sample issues, and generated credentials. T3 Code uses its Codex provider. No real GitHub token or private repository appears in the videos.
Latch is an early development build. Use generated test credentials while evaluating it. Linux supports the vault and command-launch flow with a password-protected GNOME login keyring. macOS and Windows build in CI, but their credential-store adapters and command transport are not ready.
You can currently:
- Organize secrets by project and environment.
- Import new entries from
.envand compare expected names from.env.example. - Reveal one value deliberately or copy it with timed clipboard clearing.
- Review agent requests, add missing secrets, and approve a single command launch.
- Keep the app in the tray and unlock from the request popup.
Latch records local audit metadata for vault operations, secret access, requests, decisions, and process exits. The unlocked desktop app shows this history in newest-first pages without secret values, commands, or executable paths. Weekly compressed archives with configurable retention and portable encrypted backups are still planned. There are no signed releases or automatic updates yet.
Light mode
These UI previews use sample metadata and concealed values. Latch supports system, light, and dark appearance, with native title bars that follow the desktop theme.
Read the documentation for setup, agent integration, vault management, and the security model. The guides live alongside the code and are published with GitHub Pages.
Approval controls which process receives a secret. That process can read and leak it. Latch does not sandbox approved commands.
See CONTRIBUTING.md for setup, checks, and contribution requirements, and CHANGELOG.md for changes. The example configuration contains names only and is not loaded by the app.
Latch is built by Serendeep Rudraraju. If you want to support continued development, you can buy me a coffee.
MIT.