saved
Run coding agents without API keys
Hraness wrote this summary from a saved copy of the source. Quotations are taken word for word from the source.
gist
Infisical's Tony Dang, quoting a report that OpenCode provider keys were stolen, argues coding agents should hold no API keys at all. A transparent HTTP proxy, Infisical's open-source Agent Proxy backed by Agent Vault, injects credentials into CLI, MCP and LLM traffic, so a leaky agent has nothing to leak.
ideas
- The trigger. The quoted post shares an OpenCode email saying third-party provider keys saved in workspaces may have been exposed through a legacy system.
- Keys out of reach. Scaffolding the agent environment so all traffic passes through a transparent proxy lets OpenCode open GitHub PRs or call Anthropic without holding a token.
- Two pieces. Agent Vault stores agent credentials in Infisical, and Agent Proxy fetches and brokers them; the diagram shows OpenCode to Agent Proxy to an LLM provider, GitHub and Datadog.
- Client agnostic. In a reply Dang says the proxy intercepts all CLI and MCP traffic regardless of the agent's client interface, unlike tool-integration platforms.
quotes
“you can actually run coding agents without any API keys and substantially reduce any risk associated with agents leaking keys.”
“This is non-intrusive and covers all CLI, local MCP, LLM provider traffic.”
“Confirmed. OpenCode hacked. Keys stolen.”