Panduan Integrasi
clavitor + Claude Code
Give your Claude agent secure access to credentials, TOTP codes, and API keys — without exposing card numbers, passports, or recovery codes.
What Claude sees
Bidang bersama
Claude reads these via the CLI skill to help you code, deploy, and authenticate.
- API keys (GitHub, AWS, Stripe, OpenAI...)
- Kredensial host SSH
- String koneksi database
- TOTP seeds — Claude generates 2FA codes autonomously
- Kata sandi akun layanan
What Claude never sees
Bidang pribadi
Dienkripsi di sisi klien dengan sidik jari, wajah, atau kunci keamanan Anda. Server menyimpan ciphertext. Tanpa kunci, tidak ada akses.
- Nomor kartu kredit & CVV
- Paspor & identitas pemerintah
- Kode pemulihan & frasa seed
- Nomor jaminan sosial
- Detail rekening bank
Setup in 2 minutes
Create an agent in clavitor, initialize the CLI, done. The skill installs automatically.
1. Buat agen
Open your vault -> Agents -> Create. Name it "Claude Code" and choose which entries it can access. Copy the setup token — it's shown only once.
Each agent gets its own token, scopes, and rate limits.
2. Inisialisasi CLI
On the machine where Claude Code runs:
$ echo "$CLAVITOR_TOKEN" | clavitor-cli init
3. Done
Claude Code picks up the skill immediately. Ask it to fetch a credential, generate a TOTP code, or store a new secret — it knows how.
# Claude can now run: $ clavitor-cli get "GitHub" --field password $ clavitor-cli totp "GitHub" $ clavitor-cli render app.config.json
You don't have to do anything
Once connected, Claude handles credentials automatically. Need to deploy? It looks up your SSH key. Need to log in? It fetches the password and generates the 2FA code. You just ask for what you want done.
"Deploy to production"
Claude looks up your server credentials, SSH key, and any required API tokens — then does the deployment.
clavitor-cli get "aws-production" --field secret_key clavitor-cli totp "aws" 283941
"Log in to GitHub and check the CI"
Claude finds the credential, generates a live TOTP code, and completes the 2FA flow. No phone needed.
clavitor-cli get "github" --field password clavitor-cli totp "github" 847203
"Save this API key"
Claude stores new credentials, notes, and configuration directly in your vault using clavitor-cli put. Sign up for a service, generate an API key, or jot down a config snippet — Claude saves it immediately.
"Remember this for later"
License keys, server configs, migration plans, recovery instructions — anything you tell Claude to remember goes into a Memory or Note via clavitor-cli memory put or clavitor-cli note put. Encrypted, searchable by embedding.
One vault, multiple agents
Running Claude on different projects? Create a separate agent for each.
Work agent
Scoped to GitHub, AWS, Jira, and Slack credentials
Personal agent
Scoped to email, social media, and cloud storage
Deploy agent
Scoped to SSH keys, database creds, and API tokens
Setiap akses dicatat
The audit log records which agent accessed which credential, when, and from where.
# TIME ACTION ENTRY ACTOR 2026-03-08 10:23:14 read github.com cli:claude-code 2026-03-08 10:23:15 totp github.com cli:claude-code 2026-03-08 11:45:02 read aws-production cli:deploy-agent 2026-03-08 14:12:33 render - cli:claude-code