{"slug": "fly-io-tokenizer", "name": "Fly.io Tokenizer", "category": "networking", "category_name": "Networking and VPN", "description": "", "recommenders": 4, "commenters": 7, "warners": 0, "score": 4.28, "rising": 0.02, "first": "2026-01-18", "latest": "2026-08-04", "why": "See tokenizer[0] by the fly.io team, which makes it a stateless service", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 4, "neutral": 2, "compare": 1, "warn": 0}, "spark": [0, 0, 0, 1, 1, 0, 0, 0, 0, 2, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "See tokenizer[0] by the fly.io team, which makes it a stateless service", "kind": "", "icon": true, "domain": null, "github_repo": "github.com/superfly/tokenizer", "official_url": "https://github.com/superfly/tokenizer", "pricing": "", "aliases": ["Fly.io Tokenizer", "Tokenizer", "tokenizer", "fly.io tokenizer"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 786869536, "item_id": 49179346, "url": "https://news.ycombinator.com/item?id=49179346", "by": "evertheylen", "date": "2026-08-04", "version": null, "stance": "recommend", "quote": "Could you not use something like https://github.com/superfly/tokenizer for AWS?", "excerpt": "Could you not use something like https://github.com/superfly/tokenizer for AWS? They list it as an explicit example, but I have little experience with AWS.", "context": "", "use_case": "Protecting API credentials", "switched_from": "", "story": "Keyv and friends compromised in active Shai-Hulud supply chain attack"}, {"id": 786162290, "item_id": 49135143, "url": "https://news.ycombinator.com/item?id=49135143", "by": "Rafert", "date": "2026-08-01", "version": null, "stance": "recommend", "quote": "Fly.io's tokenizer is a credential-injecting proxy", "excerpt": "And in case people are looking for an open source alternative, Fly.io's tokenizer is a credential-injecting proxy: https://fly.io/blog/tokenized-tokens/", "context": "", "use_case": "", "switched_from": "", "story": "Tailscale didn't stop the Hugging Face intrusion"}, {"id": 757669360, "item_id": 47354335, "url": "https://news.ycombinator.com/item?id=47354335", "by": "captn3m0", "date": "2026-03-12", "version": null, "stance": "recommend", "quote": "See tokenizer[0] by the fly.io team, which makes it a stateless service", "excerpt": "This problem+solution, like many others in the agentic-space, have nothing agent-specific. Giving a \"box\" API keys was always considered a risk, and auth-proxying has existed as a solution forever. See tokenizer[0] by the fly.io team, which makes it a stateless service for eg - no database or dashboard. Or the buzzfeed SSO proxy, which lets you do the same via an OAuth2-dance at the frontend, and a upstream config at", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: OneCLI \u2013 Vault for AI Agents in Rust"}, {"id": 750097698, "item_id": 46881106, "url": "https://news.ycombinator.com/item?id=46881106", "by": "dtkav", "date": "2026-02-03", "version": null, "stance": "recommend", "quote": "I'm inspired by a lot of the fly.io stuff in tokenizer and sprites", "excerpt": "I've been working on something similar (with claude code). It's a sandbox that uses envoy as a transparent proxy locally, and then an external authz server that can swap the creds. The idea is extended further in that the goal is to allow an org to basically create their own authz system for arbitrary upstreams, and then for users to leverage macaroons to attentuate the tokens at runtime. It isn't finished but I'm tr", "context": "", "use_case": "", "switched_from": "", "story": "Deno Sandbox"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["protecting api credentials"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49166874", "title": "Keyv and friends compromised in active Shai-Hulud supply chain attack", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49127306", "title": "Tailscale didn't stop the Hugging Face intrusion", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47574871", "title": "Show HN: Zerobox \u2013 Sandbox any command with file and network restrictions", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47353558", "title": "Show HN: OneCLI \u2013 Vault for AI Agents in Rust", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47041456", "title": "Running NanoClaw in a Docker Shell Sandbox", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46874097", "title": "Deno Sandbox", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {"compare": 1}, "2026-02": {"recommend": 1, "neutral": 1}, "2026-03": {"recommend": 1}, "2026-04": {"neutral": 1}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {"recommend": 2}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 786869536, "item_id": 49179346, "url": "https://news.ycombinator.com/item?id=49179346", "by": "evertheylen", "date": "2026-08-04", "version": null, "stance": "recommend", "quote": "Could you not use something like https://github.com/superfly/tokenizer for AWS?", "excerpt": "Could you not use something like https://github.com/superfly/tokenizer for AWS? They list it as an explicit example, but I have little experience with AWS.", "context": "", "use_case": "Protecting API credentials", "switched_from": "", "story": "Keyv and friends compromised in active Shai-Hulud supply chain attack"}, {"id": 786162290, "item_id": 49135143, "url": "https://news.ycombinator.com/item?id=49135143", "by": "Rafert", "date": "2026-08-01", "version": null, "stance": "recommend", "quote": "Fly.io's tokenizer is a credential-injecting proxy", "excerpt": "And in case people are looking for an open source alternative, Fly.io's tokenizer is a credential-injecting proxy: https://fly.io/blog/tokenized-tokens/", "context": "", "use_case": "", "switched_from": "", "story": "Tailscale didn't stop the Hugging Face intrusion"}, {"id": 761689120, "item_id": 47605570, "url": "https://news.ycombinator.com/item?id=47605570", "by": "TheTaytay", "date": "2026-04-01", "version": null, "stance": "neutral", "quote": "", "excerpt": "simonw, I have been seeing \"credential injection\" and \"credential tokenizing\" (a la tokenizer: https://github.com/superfly/tokenizer). I'm also seeing credential \"surrogates\" mentioned. I am currently working on a mitm proxy for use with devcontainers to try to implement this pattern, but I'm certainly not the only one!", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Zerobox \u2013 Sandbox any command with file and network restrictions"}, {"id": 757669360, "item_id": 47354335, "url": "https://news.ycombinator.com/item?id=47354335", "by": "captn3m0", "date": "2026-03-12", "version": null, "stance": "recommend", "quote": "See tokenizer[0] by the fly.io team, which makes it a stateless service", "excerpt": "This problem+solution, like many others in the agentic-space, have nothing agent-specific. Giving a \"box\" API keys was always considered a risk, and auth-proxying has existed as a solution forever. See tokenizer[0] by the fly.io team, which makes it a stateless service for eg - no database or dashboard. Or the buzzfeed SSO proxy, which lets you do the same via an OAuth2-dance at the frontend, and a upstream config at", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: OneCLI \u2013 Vault for AI Agents in Rust"}, {"id": 752748417, "item_id": 47046776, "url": "https://news.ycombinator.com/item?id=47046776", "by": "domh", "date": "2026-02-17", "version": null, "stance": "neutral", "quote": "something similar is done with fly.io's tokenizer", "excerpt": "This is similar to Deno Sandbox[1] which was announced a couple of weeks back. Apparently also something similar is done with fly.io's tokenizer[2][3] [1]: https://deno.com/blog/introducing-deno-sandbox [2]: https://news.ycombinator.com/item?id=46874959 [3]: https://github.com/superfly/tokenizer", "context": "", "use_case": "", "switched_from": "", "story": "Running NanoClaw in a Docker Shell Sandbox"}, {"id": 750097698, "item_id": 46881106, "url": "https://news.ycombinator.com/item?id=46881106", "by": "dtkav", "date": "2026-02-03", "version": null, "stance": "recommend", "quote": "I'm inspired by a lot of the fly.io stuff in tokenizer and sprites", "excerpt": "I've been working on something similar (with claude code). It's a sandbox that uses envoy as a transparent proxy locally, and then an external authz server that can swap the creds. The idea is extended further in that the goal is to allow an org to basically create their own authz system for arbitrary upstreams, and then for users to leverage macaroons to attentuate the tokens at runtime. It isn't finished but I'm tr", "context": "", "use_case": "", "switched_from": "", "story": "Deno Sandbox"}, {"id": 746800656, "item_id": 46675041, "url": "https://news.ycombinator.com/item?id=46675041", "by": "JimDabell", "date": "2026-01-18", "version": null, "stance": "compare", "quote": "How does it compare?", "excerpt": "Is this a reimplementation of Fly.io\u2019s Tokenizer? How does it compare? https://fly.io/blog/tokenized-tokens/ https://github.com/superfly/tokenizer", "context": "", "use_case": "", "switched_from": "", "story": "Using Proxies to Hide Secrets from Claude Code"}]}