Claude Code mod

keyfob

Keep your API keys and tokens out of your Claude Code conversations: tokens pasted as keyfob: lines are stored before the model sees them, Claude asks for a key through the /keyfob panel, a guard stops Bash commands that would print one, and each command gets only the keys it needs from the OS keystore

Context & usage mods Plugin marketplaceValidates on Claude Code 2.1.316 Source

Install

Inside Claude Code
/plugin marketplace add shiran-yu/keyfob
/plugin install keyfob@keyfob

Mods install like plugins. Run /reload-plugins or start a new session to load it.

What it can access

Reach
L2Writes or runs: runs processes, drives Claude, draws
Sees
every prompt, mcp__keyfob__keyfob_status calls, mcp__keyfob__keyfob_request calls
Draws in
Pane
Hooks
session.startprompt.submitcommand.runui.closetool.callui.render

From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.

How Claude Code mods work

  • A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
  • It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
  • Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
  • Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Claude Code docs

Details

Folder
plugins/keyfob
Marketplace
keyfob
Author
Shiran Yu
License
NOASSERTION
Last updated
19 October 2026

FAQ

What is keyfob?

Keep your API keys and tokens out of your Claude Code conversations: tokens pasted as keyfob: lines are stored before the model sees them, Claude asks for a key through the /keyfob panel, a guard stops Bash commands that would print one, and each command gets only the keys it needs from the OS keystore It is a mod for Claude Code, from shiran-yu/keyfob on GitHub.

What can the keyfob mod access?

Its widest reach is "writes or runs" (runs processes, drives Claude, draws). It sees every prompt, mcp__keyfob__keyfob_status calls, mcp__keyfob__keyfob_request calls. It draws in Pane. Like any mod, it runs with your permissions.

How do I install keyfob?

Inside Claude Code (v2.1.287 or later), run /plugin marketplace add shiran-yu/keyfob and then /plugin install keyfob@keyfob.

More context & usage mods

Browse the most popular Claude Code mods, all context & usage mods, or the skills and MCP server directories.