The Seventeen
21 posts

The Seventeen
@theseventeenb
We're a digital solutions company. We help businesses figure out what they're trying to say, then we build systems that say it. Websites, digital products.
Katılım Mart 2026
10 Takip Edilen7 Takipçiler
The Seventeen retweetledi
The Seventeen retweetledi

Most agents can read everything inside your .env file. So we built an AI secret infrastructure where credentials can be used without ever being exposed to the model.
Check out agentsecrets.theseventeen.co
@_agentsecrets_

English
The Seventeen retweetledi
The Seventeen retweetledi

The coding assistant reading your repository right now can also read your environment variables and config files.
Stop using local plaintext files. Move your environment to the OS keychain and gate it behind process-level verification.
agentsecrets.theseventeen.co
English
The Seventeen retweetledi

"How do I give AI agents access to my production secrets without handing them the value?"
Use AgentSecrets....
github.com/The-17/agentse…
English

@steipete @maxintechnology Agentsecrets solves this issue
github.com/The-17/agentse…
Several Openclaw users are already using this. It allows agents to make a real authenticated API call without ever seeing the actual secret value at any point.
English

@maxintechnology Yes, you can enable sandboxing and decide what your agent has access too. We also have secure storage for credentials; there’s also plugins who swap these at the proxy level - depending what level of isolation you prefer. You can also fully swap to local models.
English

That was the case in December. 4 months and thousands of work hours later, we have a great security concept; you can go all yolo, use a sandbox (Docker or OpenShell), there are allow-lists and per-access exec allow/deny prompts.
There’s hundreds of security researchers that pen-tested it.
Max Wolter@maxintechnology
@steipete @openclaw I don't think OpenClaw is a reference. It literally doesn't have a proper security model. Nothing on OpenClaw is secure by design.
English

@BasilFranken @maxintechnology @steipete Yes. Agentsecrets solves it github.com/The-17/agentse…
The local proxy pulls it from your OS keychain and injects at the transport layer. Agent only ever sees the API response.
English

@maxintechnology @steipete Out of curiosity, is there any open system that can do this? How do you supposedly do it?
English










