Claude Code
Runtime leak protection and log redaction for Claude Code. Give Claude real secrets while redacting them from output, terminals, and agent transcripts.
Prerequisites
Install Claude Code to get the
claude command.
$ curl -fsSL https://claude.ai/install.sh | bash
$ claude --version
Install
Get the Dotenvx CLI.
$ curl -sfS https://dotenvx.sh | sh
Add your secrets
Add a secret to your
.env file.
$ echo "HELLO=World" > .env
Run Claude with redaction
Runtime leak protection: Claude gets real secrets, while log redaction strips them from its output.
$ dotenvx run --redact -- claude -p 'Run `dotenvx get HELLO` and echo back just Hello VALUE' --dangerously-skip-permissions
Hello [REDACTED]