Offsend
Verified Oct 15, 2026 ActiveScreens what AI coding agents can read and swaps live secrets for reversible tokens before they reach the model.
Listed on EffectHub ·
Pricing
- Pricing model
- Freemium
- Paid options from
- $29/yr
- Billing
- Yearly
The CLI, browser extension and GitHub Action are free, and the Mac app's free tier includes unlimited Safe Paste and one watched folder. Pro is $29 per year at launch pricing (regular $49 per year) for unlimited watched folders, longer restore timers and up to 2 Macs, sold through Freemius; a Team plan is marked coming soon.
Use tool ↗About Offsend
Offsend is an open-source, local-first layer that controls what AI coding agents can see. After install, hooks for Cursor and Claude Code check prompts, file reads, shell commands and MCP calls, and can swap secrets in MCP responses for reversible tokens so the agent keeps working without the plaintext; Windsurf gets the gates without response sealing, and Codex only prompt checks. A committed policy file sets team ignore rules and syncs AI ignore files for tools such as Copilot, Cline and Aider, and a GitHub Action runs the same check in CI. A macOS app adds Safe Paste clipboard masking, and a browser extension masks values before they reach web prompts. It is built by Lab13.
- Platforms
- macOS · Linux · Chrome extension
- API
- Not confirmed
- Last verified
- Oct 15, 2026
Verified sources
- Desktop page: free tier with unlimited Safe Paste, detectors, CLI and one watched folder; Pro at $29 per year (regular $49 per year after launch) for unlimited folders, 24-hour restore and 2 Macs; Team marked coming soon (15 October 2026)offsend.io ↗
- Home page lists Cursor and Claude Code with full runtime gates and MCP response sealing, Windsurf without response sealing, Codex prompt-only, and describes Offsend as open-source and local-first; footer reads Built by Lab13 (15 October 2026)offsend.io ↗
- Refund policy says paid plans are sold through Freemius as Merchant of Record and Lab 13 supplies the product (15 October 2026)offsend.io ↗
Is Offsend legit?
We don’t label tools safe or unsafe. Below are the records we checked ourselves, each with the date we read it.
- TLS certificate
- Issued by Google Trust Services, valid until Dec 15, 2026Seen in our own connection to the site on Oct 15, 2026
- Last checked
- Oct 15, 2026The site answered
- Operated by
- Lab13Our research, card verified Oct 15, 2026
Pros & cons of Offsend
Offsend targets a real, specific risk: AI coding agents reading and forwarding secrets they shouldn't touch. The seal-and-token approach is a reasonable defense-in-depth measure, and the vendor is upfront that it isn't a hard guarantee and that coverage differs by editor. The CLI is open source and the Mac app's Pro tier is cheap, but company details stop at a team name and team billing is still marked coming soon.
Pros
- Covers files, staged git changes, clipboard content, shell commands, and MCP responses, not just one input channel
- Local-first design means code isn't uploaded to a cloud scanner
- Open-source CLI under Apache-2.0, free Mac app tier, and Pro at $29 a year
- Policy lives in one committed file and the same check runs in CI through a GitHub Action
Cons
- Gate coverage varies by editor: Codex is prompt-only and Windsurf cannot seal MCP responses
- Vendor itself frames it as defense-in-depth, not a guaranteed block
- Cloud agent sessions sit outside the local hooks
Best for
- Developers using Cursor, Claude Code, or Windsurf who want a boundary layer for secrets
- Teams wanting policy-file control over what agents can read
Not for
- Teams needing a vendor with clear enterprise support or SLA terms published upfront
- Anyone wanting a hard guarantee that agents can't access sensitive files
Watch out: The vendor's own material states this is not a guarantee an agent cannot read a file, so it should be layered with other secrets hygiene rather than relied on alone.