TokenScope

TokenScope is a web app (with optional lightweight desktop agent) that continuously discovers and inventories machine-to-machine identities: API keys, OAuth tokens, service accounts, CI/CD secrets, and cloud access keys. It connects to GitHub/GitLab, AWS/GCP/Azure, Kubernetes, and popular secret stores to map where tokens live, who/what uses them, and what they can reach. The product flags risky patterns (long-lived tokens, overly broad scopes, unused credentials, secrets committed to repos) and automates safe rotation with guardrails and rollback. It also generates an “identity attack surface” report for audits and incident response, including last-seen usage and blast-radius scoring. This is a combination traditional + AI app: traditional discovery/controls, plus AI to summarize risk, propose least-privilege policies, and draft remediation PRs. It’s built for teams that are drowning in non-human identity sprawl, not end-user SSO.