Claude Code mod

claudekeys

Session-scoped, encrypted, read-only secrets that Claude uses in commands as {{ck:NAME}} without ever seeing them

Guard & safety modsValidates on Claude Code 2.1.316 Source

Install

From source
git clone https://github.com/dixonSolutions/ClaudeKeys.git
claude --plugin-dir ./ClaudeKeys/.

The repo has no marketplace file, so load the plugin folder directly with --plugin-dir.

What it can access

Reach
L2Writes or runs: runs processes, reads files, reads env vars, draws
Sees
classic hooks, every tool call, every prompt
Draws in
SessionModePane
Hooks
session.startclassic.SessionStartsession.endcommand.runtool.calltool.checkprompt.submitsession.appendui.render

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Repository
dixonSolutions/ClaudeKeys
Folder
.
Author
dixonSolutions
Type
Guard & safety mods
License
MIT
Last updated
5 October 2026
Listed in
awesome-claude-code-mods

FAQ

What is claudekeys?

Session-scoped, encrypted, read-only secrets that Claude uses in commands as {{ck:NAME}} without ever seeing them It is a mod for Claude Code, from dixonSolutions/ClaudeKeys on GitHub.

What can the claudekeys mod access?

Its widest reach is "writes or runs" (runs processes, reads files, reads env vars, draws). It sees classic hooks, every tool call, every prompt. It draws in SessionMode, Pane. Like any mod, it runs with your permissions.

How do I install claudekeys?

Clone dixonSolutions/ClaudeKeys and start Claude Code with --plugin-dir pointing at the mod's folder (.).

More guard & safety mods

chiave

pompeitech/affreschi

Chiave counts the commands you approve by hand and, past a threshold, offers to add the rule to the project's permissions in one click; risky commands are never offered

Guard & safety mods/plugin install

clauguard

Flo0806/fh-claude-mods

A weekly usage budget per run and a handoff before the context fills: wrap up, /remember, compact, carry on

Guard & safety mods/plugin install

cascade-guard

RobGruhl/claude-mod-learnings

A Bash guard in tiers: rules in code, then a decision model, then the person; every ruling is remembered so the next one stays in code

Guard & safety mods

clear-intent

boxiaolanya2008/claudecode-plus-mod

Attach an intent protocol to every prompt: restate the goal, separate confirmed from assumed, ask before acting on vague input.

Guard & safety mods/plugin install

cache-guardian

ahenaol/claude-mods

Reloj de caché, cuota (5 h y semanal) frente al ritmo ideal, handoff preventivo y guardián del regreso

Guard & safety mods/plugin install

cm-block-dangerous-commands

rotbit/claudemods-marketplace

Refuses destructive Bash commands (rm -rf /, force-push to main, DROP TABLE, curl | sh, ...) before Claude runs them, and tells Claude why.

Guard & safety mods/plugin install

Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.