Files, clipboard & photos
Let Claude Code and other AI tools use your secrets
Your AI coding tool can find a key by name and run a command with it filled in, without the key being shown to the AI. You approve each command on your Mac first.
Where to find it
Studio → Secrets → AI tools
How to do it
Open the studio's Secrets page and turn on Let AI tools and the command line use secrets.
Press Copy Instructions for Your AI and paste them into your AI tool's rules file, such as CLAUDE.md or AGENTS.md.
Ask your AI for something that needs a key. It looks the entry up by name, then runs its command through the framecast tool.
FrameCast shows the command and the passwords it wants. Read it, then press Allow with Touch ID, or Don't Allow.
The command runs with the values filled in. Wherever a password would appear in what it prints, FrameCast hides it.
Good to know
- A command you allow gets the real values and can do anything with them, so only allow one you recognize.
- Don't ask again for 8 hours covers one project and environment. With Always ask before production passwords are used on, production always asks.
- To let your AI work on its own, turn on Let commands use passwords without asking and confirm with Touch ID. Commands then get passwords without the approval window, except production ones while Always ask before production passwords are used is on.
- The AI can list names, notes, and Configuration values without asking you. It never receives a password's value. Every use is listed under Activity.
- Who can use it
- Pro or Team
- Where it works
- Mac
This guide answers
- How do I give Claude Code my API keys safely?
- Can my AI agent use a key without seeing it?
- How do I stop pasting API keys into my AI chat?
- How do I run a command with my environment variables?
- What is the framecast command-line tool?
- Can Cursor or Codex use my FrameCast secrets?
- How do I approve a command that wants my passwords?