Guides
Practical guides to keeping API keys and secrets safe around AI coding agents, written by the team behind q-ring.
Where to store API keys for Claude Code, Cursor and Codex
Once a coding agent can read your filesystem and run commands, a plaintext .env is one tool call away from the transcript. Here is what to do instead, and how the keychain route works end to end.
9 min read
Using your OS keychain from the terminal on macOS, Linux and Windows
Each operating system already ships an encrypted credential store with a command-line interface. This guide covers the real commands, where the data lives, how to script them without leaking, and when a wrapper is worth adding.
8 min read