keyfob

Keep your API keys and tokens out of your Claude Code conversations: tokens pasted as keyfob: lines are stored before the model sees them, Claude asks for a key through the /keyfob panel, a guard stops Bash commands that would print one, and each command gets only the keys it needs from the OS keystore

keyfob reaches L2 (writes or runs) and passed claude plugin validate on Claude Code 2.1.303.

Events hooked: 6
API methods referenced: 9
Access from classified calls: L2, writes or runs: runs processes, drives Claude, draws
Static scan, not a runtime test

Install hint

/plugin install keyfob --marketplace shiran-yu/keyfob

From the repository's own marketplace. Confirm the plugin name in the repository's README before installing. Mods need Claude Code 2.1.287 or later.

Access

L2 Writes or runsruns processes, drives Claude, draws

Validation

Passed on Claude Code 2.1.303

View the source on GitHub Back to the list

What the scan recorded

Observed events: every prompt, mcp__keyfob__keyfob_status calls, mcp__keyfob__keyfob_request calls
Hooks: session.start, prompt.submit, command.run {command=keyfob}, ui.close, tool.call {tool=mcp__keyfob__keyfob_status}, tool.call {tool=mcp__keyfob__keyfob_request}, ui.render {component=Pane, requestId=keyfob}
API calls: $.command.register, $.process.run, $.prompt.submit, $.tool.register, $.ui.close, $.ui.invalidate, $.ui.open, $.ui.resolve, $.ui.toast
Validation on 2.1.303: Passed
Scanned revision: 1d4c22dcc366
Marketplace passed: keyfob

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. What a mod can access and how the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/shiran-yu--keyfob--keyfob-reach.svg)](https://mods.aidojo.si/mods/shiran-yu--keyfob--keyfob/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/shiran-yu--keyfob--keyfob-validates.svg)](https://mods.aidojo.si/mods/shiran-yu--keyfob--keyfob/)