The engine runs on your device
Detection, placeholders and restore all run in your own process. protect() and restore() make no network requests. The swap table, called the vault, stays in memory in that process unless you save it yourself.
Two things do use the network. Your own call to an AI provider sends the placeholder text you pass it. The client API in the SDK package also reports a credit count when it replaced something. That report carries a number and a label, never your text.
Pages
- QuickstartProtect a prompt, review it, send it and restore the answer in Node.
- SDK referenceEvery engine export, its options, placeholders, the vault, streaming and errors.
- InstallationLoad the browser extension unpacked and install the SDK tarball.
- API referenceThe client API in the SDK package: sessions, wrapped AI clients, credits and errors.
- Local proxyRun an OpenAI and Anthropic compatible proxy on your own machine.
Package names during the move
Hushbridge is the new name for Tightlip. Downloads, sign-in and the current Tightlip documentation stay on tightlipai.com while the move happens. The SDK package and its command are still called tightlip.
Inside the package, the engine is @tightlip/core. That is an internal compatibility name during the transition. Neither name is published on the npm registry. Install the SDK from the download link described in Installation.