Name the hazardous material
Give Codex, Claude Code, or any shell-capable agent the Sickrat skill. It learns to request named references instead of pulling raw credentials into chat.
Agent credential quarantine
Contain every secret request before it reaches the agent.
Sickrat is an open-source quarantine console for AI agents. Agents ask for named references, your phone inspects the event, and the CLI receives a short-lived encrypted grant only after you release it. The vault runs on Cloudflare resources you own.
Event SR-QTN-482913 pending release
Codex requests credential access
Approve only if this command and message match the task you intended.
Grant TTL after release 00:02:00
Containment protocol
Your agent gets a timed capability, not a permanent credential.
Admit known devices
The CLI pairs your Mac mini, server, or dev box with your vault. Each future request carries a known device, command, message, and requested secret refs.
Release a short grant
When the agent needs a secret, Sickrat opens an approval screen on your phone. Approve, deny, or ignore it. The CLI only receives encrypted material after release.
The CLI airlock
Built for the moment your agent says: "I need an API key."
The CLI sits between autonomous work and hazardous credentials. It pairs the machine, requests references, waits for your phone decision, then receives a sealed grant for the process that needs it.
$ sickrat login Opening Cloudflare login... $ sickrat vault create default Vault URL: https://sickrat-default.<you>.workers.dev $ sickrat pair https://sickrat-default.<you>.workers.dev Pairing code: 482913 $ sickrat run \ --env OPENAI_API_KEY=openai/api-key \ --message "Run the smoke test with the real API" \ -- npm test Waiting for approval on your phone... Approved. Starting child process with 1 Sickrat env value.
Agent operating procedure
Start by giving your agent one instruction file.
The Sickrat skill tells an agent how to pair with your vault URL, how to explain why it needs a secret, and how to keep raw credentials out of the conversation.