Lokim
Get access

Secrets brokering at the call boundary

Agents receive short-lived capabilities at the moment of the call — never master keys.

Lokim is the boring, load-bearing part of secrets brokering at the call boundary. Built by a small team, shipped weekly.

lokim.app
Overview
Runs
Policies
Traces
Settings
Secretslive
0standing secrets after a quarter
7 msto mint a capability
Mint on demandok
Scope by constructionok
Every mint recordedok

Teams shipping with Lokim

NorthwindKestrelRuangPolarTokoLumenBakauVela

What you get

Three things Lokim does properly.

Mint on demand

A capability exists for the seconds the call needs it, then it is gone.

01

Scope by construction

The token cannot be widened; the scope is fixed at mint time.

02

Every mint recorded

Who asked, for what, under which rule — in the same trail as the call.

03

Inside the product

One screen, the whole picture.

lokim.app
Overview
Runs
Policies
Traces
Settings
Secretslive
0standing secrets after a quarter
7 msto mint a capability
Mint on demandok
Scope by constructionok
Every mint recordedok
“Our agents used to hold a production key. Now they hold a promise that expires in thirty seconds.”

Raka A. — founder, Jakarta

0standing secrets after a quarter
7 msto mint a capability
100%of mints attributable

Pricing

Start free. Pay when it earns it.

Dev

$0/mo

1k mints / month

Choose Dev

Team

$99/mo

Unlimited mints, policy sync, SSO

Choose Team

Vault

Talk

HSM-backed, air-gapped, custom TTLs

Talk to us

Questions

The things people ask first.

Do you store my secrets?+

Only if you want a broker. Otherwise we wrap your existing vault.

What if the agent is compromised?+

It holds a capability scoped to one call, and the trail names the caller.

Latency?+

Single-digit milliseconds in-region; the mint is cached per session.

Lokim is open for design partners.

Small team, direct access to the people who build it. Bring a real workload.

Request access