Open source · Confidential computing
Confidential API Keys
A reference implementation for using third-party API keys without exposing them to the service provider.
Some restricted API keys still expose more data than a service needs. This project demonstrates a safer pattern using a Stripe API key and MRR calculation as a concrete example.
The key is encrypted with Google Cloud KMS and can only be decrypted by reviewed code running inside Google Confidential Space. Hardware-backed attestation verifies the isolated environment and the exact container before access is granted.