Solutions / AI agents

Claude Code can read your .env. Who decides what it may do?

Your developers gave an AI agent a terminal, and it runs with their rights. We tried it on ourselves: the .env read was refused.

• Give every agent its own key and role
• Refuse commands and file reads outside the role before they run
• See each refusal and the rule that stopped it