Trestle is a local secret scanner that checks source files for API keys, tokens, passwords, and private keys. Its documented CLI runs scans locally without network access.

CLI

What your agent can do

  • Trestle reads every file in the current directory and reports findings to the terminal.

    Via CLI.

Tasks depend on the interface and permissions.

Connection methods

Choose a route that fits your agent.

CLI connection

Documentation & experience

  • 1 of 1 connection paths checked
  • Latest documentation check 11 Oct 2026
View sources and checks
How documentation is checked