Policy-Based Secret Protection at Tool Boundaries

The problem

• Tool inputs and results can carry credentials.
• Different exposures need different decisions, not one blanket block.

What MACAW does

• Redacts a GitHub token from a tool result before the caller sees it.
• Denies a script carrying a cloud access key before the tool runs.
• Counts credentials: none pass, one waits for a manager, two are refused. A missing check fails closed.

What’s different

• Your own checks, run on every tool call.
• Allow, redact, approve or deny, by policy.
• Detection is separate from the decision made on it.

Policy and deployment

Policy

Zero credentials pass, one needs a manager, two are refused.

Deploy

The MACAW plugin and sidecar beside Claude Code or Codex. npm install -g macaw-ai, then macaw-ai install.