ASC / AGENT SECRET CAPSULE

LOCAL SECURITY TOOLv0.1.0

A narrow passage
for powerful secrets.

Let an agent run the command. Keep the credential out of prompts, terminal output, and tool traces.

Install the CLI Inspect the source

Single Rust binary · macOS Keychain · Linux Secret Service · no telemetry

A monolithic concrete capsule divided by one narrow seam of living moss
FIG. 01 The scope is the safety feature.
● LEASE CLOSED 0 values retained receipt asc-1787…

01Secret stays in
your OS keychain

02Only the named
process receives it

03Raw + encoded
output is scrubbed

04Receipt records
everything but value

THE MECHANISM

One lease in.
One receipt out.

The agent can name the capability it needs without ever seeing the credential that grants it.

  1. 01
    Select

    cloudflare resolves inside your OS keychain. The prompt contains only the alias.

  2. 02
    Lease

    The value exists in one subprocess environment until exit or the hard TTL.

  3. 03
    Scrub

    Stdout and stderr are captured. Exact, URL, base64, base64url, and hex forms are replaced.

  4. 04
    Receipt

    Time, alias, command, outcome, and redaction count remain. The value never does.

CONTROLLED DEMO

Try the observable boundary.

This browser demo uses a fake value and never sends it anywhere. It shows exactly what the CLI releases to an agent tool trace.

ASC / LEASE 30sREADY
$ asc run demo --env API_TOKEN -- printenv API_TOKEN

Waiting for a local command…

INSTALL / v0.1.0

Inspect it. Build it. Keep it local.

There is no daemon, account, cloud vault, or telemetry endpoint. Rust 1.85+ builds one binary.

cargo install --git https://github.com/B-Divyesh/sf-agent-secret-capsule

STORE / NO HISTORY

printf '%s' "$TOKEN" |
asc put cloudflare --stdin

LEASE / 30 SECONDS

asc run cloudflare --env
TOKEN --ttl 30s -- curl …

AUDIT / NO VALUES

asc receipts --json
Read the full CLI reference

HONEST BOUNDARY

Redaction is containment.
It is not a sandbox.

An authorized command can still send the credential over the network, write it to a file, transform it into an unknown encoding, or pass it to a child process.

Review the exact command and endpoint. Use a separate network/process sandbox for hostile code.

ONE-TIME SUPPORTER LICENSE

The safety layer stays free.
Support the release.

Core storage, leases, redaction, JSON receipts, and accessibility are never gated. A $19 one-time license unlocks the team rollout kit and supports signed binary releases and lifetime updates.

  • Team threat-model and rollout checklist
  • Receipt-retention policy starter
  • Lifetime product updates

Sociobot/Dodo is the merchant of record. Refunds are handled there and revoke the license automatically.

$19once
Buy a supporter license

Free core active. No license saved.

PrivacyTerms