Inspect stored credentials during authentication debugging

Investigate credential and token state in your iOS app using explicitly allowed secure-storage keys in local development.

SecureStorage tools help you investigate which credentials or tokens are stored when debugging authentication behavior. They can read, replace, or remove explicitly allowed values; keep access limited to the keys and local workflow you need.

Warning: Every tool in this suite is Critical because it can expose or mutate secrets. Keep the allow-list narrow and only enable this suite when you explicitly need secure-storage inspection or repair.

Install

Published pod: AnsightToolsSecureStorage.

SwiftPM:

.product(name: "AnsightToolsSecureStorage", package: "ansight-sdk")

CocoaPods:

pod 'AnsightToolsSecureStorage'

Register the Suite

import AnsightCore
import AnsightToolsSecureStorage

let secureStorage = AnsightSecureStorageToolsOptions.createBuilder()
    .withAppleService("com.example.app")
    .allowKeyPrefix("debug.")
    .build()

try AnsightRuntime.shared.registerSecureStorageTools(options: secureStorage)

Registration API

registerSecureStorageTools(options:): registers the suite.
AnsightSecureStorageToolsOptions.createBuilder(): creates a suite options builder.
withStorageIdentifier(...): sets the storage identifier.
withAppleService(...): sets the Keychain service.
allowKey(...) / allowKeyPrefix(...): allow specific keys or key prefixes.

Specific Concerns

Values may contain credentials, tokens, or other secrets.
Keep key allow-lists narrow.
All secure-storage tools use .critical, including reads, and require .fullAccess because their values are secrets.

Tool Matrix

Name	Id	Policy	Description
`Get Secure Storage Value`	`secure.get_value`	`Critical`	Reads a Keychain value from the configured service.
`Set Secure Storage Value`	`secure.set_value`	`Critical`	Writes a Keychain value.
`Remove Secure Storage Key`	`secure.remove_key`	`Critical`	Deletes a Keychain value.

Tool Details

Use secure.get_value only for explicit local debugging. Use secure.set_value and secure.remove_key only when repairing a local development session and the key allow-list is narrow.