About this project

secretgenerator is an auditable random credential generator designed for AI agents and machine‑readable pipelines. It replaces ad‑hoc password generation with a verifiable contract backed by the operating system’s CSPRNG, ensuring strong entropy (NIST‑aligned floors) and reproducible JSON output (schema v1). The tool offers subcommands for passwords, diceware passphrases, raw secrets, API keys, PINs, and entropy estimation, each supporting class‑requirement guarantees via rejection sampling. Releases are signed with SLSA Level 3 and cosign keyless signatures, and include CycloneDX SBOMs for auditability. Installation options include zero‑install npm CLI, Homebrew, Docker, Go, Python, Rust, and an MCP server for integration with Claude, Cursor, and Cline. The Go library provides programmatic access, while examples in six languages demonstrate usage. Full documentation covers subcommands, schema, cryptography, and end‑to‑end verification.