DEDUPED Hot AI repos, turned into use cases Get the Monday 5

How to let agents use API keys they can never see with Open Shell

Give agents credentials that only work at approved endpoints, so a leaked prompt cannot leak the key.

Credentials. You still store the real keys in Open Shell, so protect the gateway like any other secret store and keep each provider scoped to the fewest endpoints.

Who it is forA team lead whose agents call paid model and SaaS APIs and who worries about keys ending up in logs or the wrong host.

The problemAn agent that holds a raw API key can send it anywhere, including to a host a prompt injection points it at.

The outcomeAgents that call approved APIs normally while the real credentials stay outside the sandbox.

What you need first

  • Linux, macOS on Apple Silicon, or Windows with WSL 2 (experimental)
  • Docker, Podman, or host virtualization
  • An agent to run inside the sandbox; the default image is minimal Ubuntu with no agent installed
  • For Kubernetes: Helm and a CNI that enforces NetworkPolicy

Steps

  1. Install Open Shell and create a sandbox as in the quickstart
  2. Set up a Provider for each credential; the docs cover providers that work only at approved endpoints, including inference
  3. Declare in the sandbox policy which hosts and API methods the agent may reach
  4. Let Open Shell add the credential only to requests bound for those approved endpoints; the agent never sees the real value
  5. When a policy change would let a credential reach a new host or API method, review what the prover flags before approving it

Prompt for your agent

Using NVIDIA/OpenShell, set up a provider for <service> so the agent in sandbox <name> can call <approved endpoint> without ever reading the real key. Then try a request to an unapproved host and confirm it is blocked, and show me what the policy prover flags if I add that host.

Caveat. The README points to the docs for provider and policy syntax rather than showing it, so plan to read the Providers and Policies pages.

Use this in your AI agent

Ask your agent

Using the Deduped MCP, get the setup steps for NVIDIA/OpenShell and "Let agents use API keys they can never see"

Add Deduped to Claude Code once

claude mcp add --transport http deduped https://dedupedai.com/mcp

Cursor, ChatGPT, others

Share: X LinkedIn Hacker News Email Copy link

Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer