Kantrip securely manages local Kafka profiles for command-line tools and compatible applications.
Kantrip is in active pre-release development. The current CLI provides help, version information, presentation behavior, a profile schema, and a documented application environment. Profile and session commands are not implemented yet.
- Versioned, non-secret Kafka profile schema
- Operating-system credential-store references instead of plaintext secrets
- Explicit TLS, SASL, OAuth, Schema Registry, Strimzi, and MSK IAM models
- Classified values and safe diagnostic redaction
- Child-process
KAFKA_*andSCHEMA_REGISTRY_*variables - Java, librdkafka, and Schema Registry configuration paths
- Child-only credential exposure with no parent-shell export
- Explicit opt-in for compatible applications
- Rich-based Arcana theme with semantic colors
- Clean stdout/stderr separation
NO_COLOR,TERM=dumb,--no-color, and non-TTY behavior
- Profile creation and secure-store integration are not implemented yet
kantrip exec,kantrip ping, adapters, and temporary-session cleanup are not available yet- Linux and macOS are the only planned MVP platforms
- No Docker distribution or hosted service is planned
pipx install kantripThese commands describe the intended workflow and are not all available yet:
kantrip add local
kantrip use local
kantrip current
kantrip ping local
kantrip exec local -- kaskade adminFor configuration and usage examples, see the Kantrip usage guide.
For development instructions, see the Kantrip development guide.
See GitHub Releases for release notes and downloadable artifacts.
For Q&A, go to GitHub Discussions.
Report suspected vulnerabilities privately by following the Kantrip security policy.
If Kantrip is useful to you, consider supporting its development on GitHub Sponsors.
This project uses AI-assisted development tools. Some code and documentation may be generated or revised with AI assistance. All AI-assisted changes are reviewed and tested by the maintainer before they are included.
