Agents get access.
Never your secrets.

A credential manager for you and your agents. Write plain-language rules. A local bouncer permits normal work, asks you when unsure, and blocks the rest.

Download for macOS Read the source

macOS 15 or later · Apple silicon · Works with Claude Code and Codex

Agent requests

Codexstripe balance retrieveSTRIPE_SECRET_KEYRunsread-only
Claude Codenpm run migrateDATABASE_URLRunsfits the task
Codexpsql $PROD_DATABASE_URLPROD_DATABASE_URLAsks youproduction
Claude Codenpm run db:reset --forceDATABASE_URLBlockedyour rule: never --force