{
 "schema_version": 1,
 "generated": "2026-10-25",
 "id": "nvidia-openshell--keep-api-keys-away-from-your-agents",
 "repo": "NVIDIA/OpenShell",
 "repo_url": "https://github.com/NVIDIA/OpenShell",
 "repo_slug": "nvidia-openshell",
 "title": "Let agents use API keys they can never see",
 "page_title": "How to let agents use API keys they can never see with Open Shell",
 "summary": "Give agents credentials that only work at approved endpoints, so a leaked prompt cannot leak the key.",
 "who": "A team lead whose agents call paid model and SaaS APIs and who worries about keys ending up in logs or the wrong host.",
 "problem": "An agent that holds a raw API key can send it anywhere, including to a host a prompt injection points it at.",
 "outcome": "Agents that call approved APIs normally while the real credentials stay outside the sandbox.",
 "steps": [
  "Install Open Shell and create a sandbox as in the quickstart",
  "Set up a Provider for each credential; the docs cover providers that work only at approved endpoints, including inference",
  "Declare in the sandbox policy which hosts and API methods the agent may reach",
  "Let Open Shell add the credential only to requests bound for those approved endpoints; the agent never sees the real value",
  "When a policy change would let a credential reach a new host or API method, review what the prover flags before approving it"
 ],
 "agent_prompt": "Using NVIDIA/OpenShell, set up a provider for <service> so the agent in sandbox <name> can call <approved endpoint> without ever reading the real key. Then try a request to an unapproved host and confirm it is blocked, and show me what the policy prover flags if I add that host.",
 "agents": [
  "claude-code",
  "codex",
  "cursor"
 ],
 "difficulty": "Advanced",
 "time": "1 hour",
 "basis": "readme",
 "caveat": "The README points to the docs for provider and policy syntax rather than showing it, so plan to read the Providers and Policies pages.",
 "category": "Software and DevOps",
 "tags": [
  "Software and DevOps"
 ],
 "lang": "rust",
 "requirements": [
  "Linux, macOS on Apple Silicon, or Windows with WSL 2 (experimental)",
  "Docker, Podman, or host virtualization",
  "An agent to run inside the sandbox; the default image is minimal Ubuntu with no agent installed",
  "For Kubernetes: Helm and a CNI that enforces NetworkPolicy"
 ],
 "risk": "none",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [
  {
   "tag": "credentials",
   "notice": "You still store the real keys in Open Shell, so protect the gateway like any other secret store and keep each provider scoped to the fewest endpoints."
  }
 ],
 "best": false,
 "score": 0.9,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/nvidia-openshell/keep-api-keys-away-from-your-agents/",
 "md": "https://dedupedai.com/use-cases/nvidia-openshell/keep-api-keys-away-from-your-agents/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/nvidia-openshell--keep-api-keys-away-from-your-agents.json",
 "api_version": "v1"
}