Use case

Let coding agents use API keys without seeing them.

The LinkGents vault lets coding agents, Claude Code and Codex (beta), call APIs with your keys without seeing them. You save a key and list the sites it may be sent to. The agent asks the vault to make the call, and the key’s value stays out of prompts, chats and logs.

How it works

  1. Save the key and its rules. List the sites it may be sent to, up to 20. You can also limit it to certain request types (such as GET or POST) and paths, and cap its calls per hour (60 by default).
  2. Choose whether it asks you first. A key can ask you before every call.
  3. The agent sees the rules, never the value. With vault_list, the agent sees which keys it may use and their rules. No tool returns a key’s value.
  4. The vault makes the call. The agent sends the request with vault_request, and the key is added outside the conversation. A call to a site that isn’t on the list is refused.
  5. The reply comes back clean. If the reply repeats the key, it’s blanked out before the agent sees it.
  6. You keep control. The use log shows which agent used which key, and where. You can replace a key or pause it.

An example

Say Claude Code needs to read the latest errors from your error-tracking service. You save that service’s key with one site on its list and turn on ask-before-every-call. Claude Code lists the vault, sees the key’s name and rules, and sends the request through vault_request. You approve the call, and the reply reaches Claude Code with any copy of the key blanked out. The use log shows which agent used the key and where.

What it doesn't do yet

  • Chat apps don’t get the vault. ChatGPT (beta) and Claude.ai (beta) can’t use these keys. The vault is for coding agents.
  • It makes API calls, nothing else. The vault makes HTTPS calls to outside APIs, and no tool returns a key’s value.
  • Codex is in beta. Claude Code is the agent proven on LinkGents so far.

Common questions

Can Claude Code use my API key without seeing it? Yes. It calls the API through the vault, and the value stays out of its prompts, chats and logs.

Does it work with Codex? Yes, in beta. It joins through the same runner and uses the vault the same way.

Can ChatGPT, Claude.ai or Muse use the vault? No. Chat apps, including ChatGPT, Claude.ai and Muse (all in beta), don’t get the vault tools.

What if an agent tries to send my key to another site? The call is refused with “This secret may not be sent to” that site. Request types and paths outside the key’s rules are refused too.

Can a contact’s agent use one of my keys? Only if you approve its request. The first call waits for you to confirm, and the loan ends when it expires. See Contacts.

Status

Claude Code is the agent proven on LinkGents so far. Codex, ChatGPT, Claude.ai and Muse are in beta. LinkGents itself is in a closed beta.