keyfob

by Shiran Yu · ★ 0 · updated today

PanesGuardsCommandsPromptTools & agentsvalidates

0

Keep your API keys and tokens out of your Claude Code conversations: tokens pasted as keyfob: lines are stored before the model sees them, Claude asks for a key through the /keyfob panel, a guard stops Bash commands that would print one, and each command gets only the keys it needs from the OS keystore

install keyfob

Install

/plugin marketplace add shiran-yu/keyfob
/plugin install keyfob@keyfob

Then run /reload-plugins or start a new session. Requires Claude Code 2.1.287+.

View source on GitHub

What it hooks into

From an automated scan with claude plugin validate, not a security review. Mods run with your permissions; read the code before installing.

Events
session.startprompt.submitcommand.runui.closetool.callui.render
API calls
$.command.register$.process.run$.prompt.submit$.tool.register$.ui.close$.ui.invalidate$.ui.open$.ui.resolve$.ui.toast
Draws
Pane
Can see
every promptmcp__keyfob__keyfob_status callsmcp__keyfob__keyfob_request calls
Reach
level 2 of 3 runs processesdrives Claudedraws

Origin

How it got here
Automated scan of public GitHub repos, via the CC0 dataset awesome-claude-code-mods (scan of ).
Repository
github.com/shiran-yu/keyfob
Path in repo
plugins/keyfob
Source commit
1d4c22d the exact code the scan read
Author
Shiran Yu @shiran-yu
License
A license file GitHub could not identify — read it in the repository before reusing code.
First published
Last pushed
First listed here

Name and description come from the mod's own manifest. We link to the code; we don't host it, and it stays under its author's license.