Arca Secrets

ARCA is an offline, local-first password and secrets manager developed by Arca Vision Labs LLC, an Austin, Texas-based deep-tech R&D and software engineering firm. Built for developers, technical users, and autonomous AI agents, ARCA replaces traditional cloud-hosted credential SaaS and plain-text configuration files with a single portable, encrypted local vault file.

The system operates under a strict security model: the cryptographic core contains no network sockets or dependencies, ensuring that credentials, decryption keys, and runtime tokens are physically and mathematically isolated from external cloud exposure, vendor subpoenas, or centralized multi-tenant breaches.

Key Capabilities & Developer Workflows:

1. Arca agent (AI Agent Credential Broker): Addresses credential leaks caused by AI assistants (e.g., Cursor, Claude Code, Cline) reading persistent .env files into LLM context windows, system prompts, and tool telemetry.
2. Arca inject (In-Memory Runtime Injection): Launches application processes and scripts (cargo test, npm run dev, docker compose) with secrets supplied directly to the child process environment.
3. Native SSH Agent (arca ssh): Provides an in-app SSH agent communicating over a dedicated local Unix domain socket (~/.arca/agent.sock).