Star on GitHub - 5.8k

Claude Code

Runtime leak protection and log redaction for Claude Code. Give Claude real secrets while redacting them from output, terminals, and agent transcripts.

Prerequisites

Install Claude Code to get the claude command.
$ curl -fsSL https://claude.ai/install.sh | bash
$ claude --version

Install

Get the Dotenvx CLI.

$ curl -sfS https://dotenvx.sh | sh

Add your secrets

Add a secret to your .env file.
$ echo "HELLO=World" > .env

Run Claude with redaction

Runtime leak protection: Claude gets real secrets, while log redaction strips them from its output.
$ dotenvx run --redact -- claude -p 'Run `dotenvx get HELLO` and echo back just Hello VALUE' --dangerously-skip-permissions
Hello [REDACTED]