Meathill HSM
Meathill HSM is a local-first secrets manager that keeps keys and sensitive config safe to store and use, reducing the risk of credentials leaking into code, files, and clipboards.
Meathill HSM
Meathill HSM is a software-defined key management tool built on Cloudflare Workers and KV. It helps developers store and use API tokens, client secrets, and other sensitive config, reducing the risk of them leaking into repos, config files, and clipboards.
It combines envelope encryption, key sharding, HMAC-SHA256 index blinding, and AES-GCM-256 AEAD. The server holds only part of the key derivation; the client provides the other part via an X-HSM-Secret header, so the hosted service itself cannot decrypt your data, and integrity checks block overwrites with wrong keys.
HSM supports CORS out of the box — frontends can call store, read, update, and delete endpoints directly without handing client secrets to a relay backend. The project also ships llms.txt, SKILL.md, and MCP config so Codex, Claude, Cursor, and Copilot can understand and adopt the API.
Deploy your own instance with one-click Cloudflare deploy, or use it as a secrets store for small automation projects.
Visit: https://hsm.meathill.com