Comment by pants2
1 day ago
I have a custom wrapper for 1PW that lets an agent browse and request credentials, then I can provide it a lease to access those for a certain amount of time. Super nice and I hope they build that in to 1PW itself.
1 day ago
I have a custom wrapper for 1PW that lets an agent browse and request credentials, then I can provide it a lease to access those for a certain amount of time. Super nice and I hope they build that in to 1PW itself.
I do this too and have a wrapper around tool calls which masks the password on tool call output, and unmasks on input. So the LLM just sees a temp credential
Just an idea, is it possible to automatically rotate secrets immediately after they're used or are these things like passwords to online platforms that need to go through a reset flow.
Cant you do exactly this with the CLI?
No, not as far as I can figure. Sure, Claude can access secrets with the CLI but it's not very granular usually it's just asking for access to all secrets
Ah, that's fair. I setup a dedicated vault for my Claude Code and only gave it access to the secrets I'd probably otherwise have in a `.env`.