@deemwario/agent-proxy

A local proxy that masks secrets before they leave your machine.

AgentProxy sits between your AI coding agents (Claude, Codex, Copilot, opencode, Devin) and their remote APIs. It scans outbound traffic, replaces any secret it finds with a shape-preserving surrogate, and restores the original in the response — so the agent works exactly as normal and your secrets never hit the wire.

Zero cloud dependency. Runs entirely on your machine. No changes to your agents.

Before:  Claude → api.anthropic.com               (prompt contains sk-ant-api03-abc123…)
After:   Claude → AgentProxy → api.anthropic.com   (prompt contains sk-ant-api03-rda120…)

The response comes back with the real value restored, so the agent sees what it expects.

Install

npm install -g @deemwario/agent-proxy
agentproxy version

No Go toolchain required — postinstall downloads the prebuilt binary for your platform from the GitHub release, verifies its SHA256 against the release checksums.txt, and extracts the agentproxy binary plus the agent wrappers onto your PATH.

Other install paths (all fetch the same SHA256-verified binary):

# curl-pipe (macOS / Linux)
curl -fsSL https://agentproxy.deemwar.com/install.sh | bash

# Homebrew (macOS)
brew install deemwar-products/agent-proxy/agentproxy

# Scoop (Windows)
scoop bucket add agent-proxy https://github.com/deemwar-products/scoop-agent-proxy
scoop install agentproxy

Supported: macOS / Linux (x64, arm64), Windows (x64).

Quick start

agentproxy setup --open      # trust the local CA, start the proxy + dashboard (idempotent)

Then run your agents through the proxy — one wrapper per agent, installed alongside the binary:

claudeproxy    "summarise this codebase"
codexproxy     "fix the failing test"
copilotproxy   suggest "list files by size"
opencodeproxy  "add a test for the parser"
devinproxy     "triage this bug"

Each wrapper routes an agent through the proxy — it does not install the agent. The agent's own CLI (claude, codex, the GitHub Copilot CLI, opencode, devin) must already be installed and authenticated. A wrapper prints the exact install command if its CLI is missing.

Transparent mode (no wrapper)

Prefer plain claude / codex? Enable transparent mode once and every new shell routes through AgentProxy automatically:

agentproxy shell enable      # persists proxy + CA env into ~/.zshrc / ~/.bashrc (reversible)

Run as a background service

agentproxy service install    # auto-start at login (launchd / systemd --user / Task Scheduler)

What gets masked

API keys, connection strings, JWTs, .env contents, and private keys — detected by regex patterns, including secrets buried inside gzip / base64 / hex / URL-encoded bodies. Surrogates are random-looking and shape-preserving, and restoration works even across streamed (SSE / WebSocket) response chunks.

Privacy

• Everything is local — no account, no telemetry, no cloud.
• Originals never touch disk — surrogate↔original mappings live in memory only.
• Binaries are verified — every install path checks the archive SHA256 before extracting.

📖 Full docs & dashboard: agentproxy.deemwar.com · MIT licensed