{
  "manifest_version": "1",
  "slug": "agent-secrets",
  "title": "Agent secrets",
  "headline": "Give agents API access without giving them the keys",
  "description": "Let coding agents call models, Stripe, or any API from an exe.dev VM while the keys stay outside it, added at the network edge where no agent can read them.",
  "category": "security",
  "tags": [
    "ai agent api keys",
    "agent secrets",
    "credential injection",
    "api key proxy",
    "prompt injection",
    "llm gateway",
    "claude code api key",
    "codex api key",
    "secrets management for ai agents",
    "egress control"
  ],
  "url": "https://exe.dev/deploy/agent-secrets",
  "markdown_url": "https://exe-staging.dev/deploy/agent-secrets.md",
  "upstream": {
    "website": "https://exe.dev/docs/integrations",
    "docs": "https://exe.dev/docs/integrations"
  },
  "example_vm_name": "my-agent-box",
  "time": "15 minutes",
  "stack": [
    {
      "name": "Your agent",
      "detail": "Claude Code, Codex, pi, or Shelley, preinstalled",
      "data": "~/.claude, ~/.codex, ~/.pi"
    },
    {
      "name": "LLM integration",
      "detail": "models at llm.int.exe.xyz, no model key on the VM"
    },
    {
      "name": "HTTP proxy integration",
      "detail": "Stripe at stripe.int.exe.xyz, key added by exe.dev"
    },
    {
      "name": "Egress policy",
      "detail": "integrations only; nothing else leaves the VM"
    }
  ],
  "access": [
    {
      "url": "ssh my-agent-box.exe.xyz",
      "who": "private",
      "what": "the agent's terminal"
    },
    {
      "url": "https://my-agent-box.shelley.exe.xyz/",
      "who": "private",
      "what": "Shelley, the agent in your browser"
    }
  ],
  "delivers": [
    "Claude Code, Codex, and pi answering through the LLM integration, with no model key on the VM",
    "The Stripe API at `https://stripe.int.exe.xyz`, with a restricted key exe.dev adds outside the VM",
    "Agents that know where their APIs are and never ask for a key",
    "A VM that reaches its integrations and nothing else"
  ],
  "deployable": false,
  "updated": "2026-10-30",
  "related": [
    "claude-code",
    "codex",
    "openclaw",
    "hermes-agent",
    "exe-mcp",
    "n8n"
  ]
}