Claude Code
Runtime leak protection and log redaction for Claude Code. Give Claude real secrets while redacting them from output, terminals, and agent transcripts.
Prerequisites
Install Claude Code to get the
claude command.
$ curl -fsSL https://claude.ai/install.sh | bash
$ claude --version1. Install
Get the Dotenvx CLI.
$ curl -sfS https://dotenvx.sh | sh2. Add your secrets
Add a secret to your
.env file.
$ echo "HELLO=World" > .env3. Run Claude with redaction
Runtime leak protection: Claude gets real secrets, while log redaction strips them from its output.
$ dotenvx run --redact -- claude -p 'Run `dotenvx get HELLO` and echo back just Hello VALUE' --dangerously-skip-permissions
Hello [REDACTED]