ClaudePass: your AI agent sees a Handle, never the Secret.
CLAUDEPASS PRESENTSYour Handles — like stripe/live — are inside. The intruders only get the name — never the value.
- SCORE
- 000000
- WAVE
- 1
- LIVES
- HI-SCORE
- 000000
ClaudePass is a local secret manager for AI coding agents. Every
leak attempt — env, cat .env,
echo $KEY, a pasted key — is an intruder tank. The
Broker is what stops it before it reaches the Vault.
Local to this browser — nothing is sent anywhere. Ever.
| # | Initials | Wave | Score |
|---|---|---|---|
| NO SCORES YET — BE THE FIRST | |||
▶HOW IT WORKS
CLAUDE CODE
cpass integrate claude installs an Intercept hook
that catches a pasted Secret before the model ever sees it, a
Command Policy hook that blocks commands built only to reveal
a Secret, and a skill that teaches Claude Code to reach for a
Handle instead of asking you for a value.
CODEX
cpass integrate codex writes a delimited section
into AGENTS.md, so Codex learns the same Handles
and the same cpass run -- <command> pattern
— no separate integration to maintain.
MCP
cpass mcp speaks the Model Context Protocol over
stdio, exposing list_handles,
run_with_secrets, and capture as
tools any MCP client can call — the same Broker, Redaction,
and Command Policy underneath.
▶INSTALL
One command. No account, ever.
brew install softorize/tap/cpass
curl -fsSL https://claudepass.com/install.sh | sh
▶FREE & OPEN SOURCE
No plans, no paywall, no account. Every Secret, every integration — MIT licensed, forever.
- Unlimited Secrets
- Env and file Bindings
- Command Policy & Redaction
- Claude Code, Codex, and MCP integrations
- Manifest, Global Manifest, Capture, and Intercept
▶SECURITY, BY DESIGN
ClaudePass is free and open source under the MIT license — read every line yourself. This page still documents exactly what the Vault, the Broker, and both hooks do and touch, every environment variable and on-disk path, and a plain no-telemetry statement.
READ THE FULL SECURITY BREAKDOWN → · VIEW SOURCE ON GITHUB →