Claude Code mod
mask-that-pass
Masks credentials in tool output (URL passwords, *_TOKEN / *_SECRET / *_PASSWORD values, API keys, bearer tokens, private keys) before Claude or the transcript sees them. No network, files or processes.
Install
/plugin marketplace add myveroai/mask-that-pass
/plugin install mask-that-pass@mask-that-passMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L0Draws and remembers: draws
- Sees
- Bash calls
- Hooks
tool.callsession.append
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- myveroai/mask-that-pass
- Folder
.- Marketplace
mask-that-pass- Author
- Mask That Pass contributors
- License
- MIT
- Last updated
- 2 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is mask-that-pass?
Masks credentials in tool output (URL passwords, *_TOKEN / *_SECRET / *_PASSWORD values, API keys, bearer tokens, private keys) before Claude or the transcript sees them. No network, files or processes. It is a mod for Claude Code, from myveroai/mask-that-pass on GitHub.
What can the mask-that-pass mod access?
Its widest reach is "draws and remembers" (draws). It sees Bash calls. Like any mod, it runs with your permissions.
How do I install mask-that-pass?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add myveroai/mask-that-pass and then /plugin install mask-that-pass@mask-that-pass.
More guard & safety mods
leaks
devsomelife/somelife-claude-mods
Notices personal identifiers and secrets that reach the model, lists them per project, and can redact or block them, with modes and ignore lists per folder
mellu
kotaraa09/easyClaude
A stack-agnostic harness that makes Claude Code work well on any project: persistent state, an enforced verify gate, guardrails, and a token-frugal escape hatch.
keepwarm
luwux/keepwarm
Idle-session guard for Claude Code's 1-hour prompt cache (macOS): about 50 idle minutes after the last turn of a large session it notifies you, optionally after a cache-read fork judges whether to compact, keep warm or leave it; every request and change it makes is audited. Derived from cache-tax (MIT, Karan Bansal).
merge-watch
b00y0h/merge-watch
A panel that groups every open merge request or pull request by whether it can merge, shows failing jobs, and can retry or merge after you confirm. Refreshed once a minute.
jev-guard
klefix/claude-code-mods
Asks Jev whether a prompt leaves a choice open and whether each edit stays within what the user approved
mermaid-inline
Conte777/claude-mermaid
Mermaid diagrams in Claude Code: every ```mermaid block Claude writes is drawn as a picture right where the fence was in the transcript, with an open-SVG button, and as box art where the terminal cannot show pictures. Fork of galElmalah/claude-mods claude-mermaid. Needs function hooks (early access), node and resvg.
Browse the most popular Claude Code mods, all guard & safety mods, or the skills and MCP server directories.