Don't take our word for it. Inspect the path.
TigerMole masks detected sensitive values locally before Claude Code or Codex sends a request. Here are the connections, cryptography, and meaningful states behind 111 detection rules. TigerMole receives no content telemetry.
Three routes. Nothing hidden.
The supported flow passes through the local boundary before the provider. Licensing uses a separate route and never carries prompts, code, or secrets.
127.0.0.1:9800Local interception point. Detected values are replaced here before the request leaves the device.
api.anthropic.com · api.openai.comThe provider receives the transformed request and its protocol metadata. Its own data-processing terms continue to apply.
api.tigermole.comActivation, deactivation, and revalidation. It receives the license key, pseudonymous device identifier, optional label, and platform.
Coverage by surface.
The same local policy applies across the published integrations. Choose the surface that matches your team's flow.
| Service | Code | Extension / browser |
|---|---|---|
| Claude | Available | Available |
| ChatGPT | Available | Available |
| Gemini | — | Available |
| Perplexity | — | Available |
Coverage depends on the surface and content that can be analysed. Routes that bypass the local integration fall outside its scope.
Each key stays where it belongs.
- License at rest
- DPAPI / AES
- The local license is protected in the current user's device context.
- Audit integrity
- SHA-256 + ED25519
- With Team, present entries are signed to help detect changes. Signing does not prove that a record is complete.
- Audit encryption
- X25519 + ENC2
- An optional Team setting using the organisation's public key. TigerMole never receives the private key.
Protection has to be active.
On supported flows, if the local engine does not respond or cannot analyse a request, TigerMole can block it. If a license becomes invalid, protection is disabled and the assistant can continue without masking.
Follow the implementation path.
The public quickstart explains activation, the local proxy, and the checks you can run after installation.
Open the quickstart