Claude Code can already keep your API keys away from the model
This is a vibe coding post classified by AGK Intelligence as Agent infra & costs (a workflow), kept by the Vibe Coding Radar because it carries real work, not commentary.
Claude Code can already keep your API keys away from the model Mask a key in the sandbox and your agent runs only ever see a placeholder The sandbox proxy swaps the real key in on requests to the hosts you list, it never lands in the transcript In ~/.claude/settings.json: {"sandbox":{"enabled":true,"network":{"tlsTerminate":{},"allowedDomains":["http://api.github.com"]},"credentials":{"envVars":[{"name":"GH_TOKEN","mode":"mask","injectHosts":["http://api.github.com"]}]}}} I still make heavy daily use of my env mod though /plugin install env@davekiss https://github.com/davekiss/env
Posted by Dave Kiss (2.8k followers) 7 days ago · 90 likes · 8.8k views · view the original post on X. Kept by the Vibe Coding Radar as Agent infra & costs. Tools mentioned: env.
More vibe coding work like this
- Build an agent on @onkeiki to answer your customers while you sleep. — @orchid_hq
- how do you stop 20+ agents from colliding on the same client work? — @webjuice_ie
- Brilliant paper on optimizing agent environments. — @dair_ai
- Docker is one box. The coding agent can run in others, and switching is one line 🧰 — @marcelotryle
- Holy f*cking sh*t... everyone upgrades Claude and nobody builds the harness — @gippp69
- 1/9 — @TollyLabs
- As AI coding agents get more capable, knowing what they're doing becomes just as… — @EntelligenceAI
- btw in Portals you can now manage your agent CLI versions, update them, and view their… — @imnotchalk
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 7.9k posts from 5k X accounts over the last 14 days, 2.6k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-11-06 15:18 UTC. Full method.