Skip to main content
Self-hosted Kubernetes infrastructure for Claude Code, Codex, and any coding agent — without ever giving them your real API keys. A vault proxy swaps stub credentials for real keys at the wire level, so agents never hold the real values.

​
How it works

The agent process only ever sees stub credentials. The vault sidecar swaps them for real keys at the wire level, so real values exist only in the sidecar’s memory — never in the agent process, never logged, never stored.

​
Get started

Install

Run locally on kind, or deploy to AWS EKS.

Run Claude Code

Open your first sandbox from the terminal.

Learn the vault

How agents stay isolated from real credentials.