Documentation
Start using s-gw without exposing a credential
Start with a disposable token, watch the complete request and approval path, then connect the coding agent you actually use.
First run
Three commands establish the local boundary
Install the public package, complete local setup, and verify that the broker and interfaces are ready.
Terminal
npm install -g @s-gw/s-gw
s-gw setup
s-gw statusChoose a path
Documentation by task
Quick startRun a complete approval and sanitization loop with disposable data.
Agent integrationsConnect Codex, Claude Code, Cursor, Gemini CLI, OpenCode, GitHub Copilot CLI, and VS Code.
ArchitectureUnderstand the broker, execution core, local interfaces, and trust boundaries.
Threat modelReview intended guarantees, trusted components, non-goals, and residual risk.
1Password integrationUse an encrypted
op:// reference as an optional local source.
Agent contract
The model works with metadata
Agent-facing interfaces expose typed handles and non-secret metadata. A separate local approval authorizes a specific use.
What the agent can reference
s-gw:credential:prod-readonly
That handle is useful for a request. It is not a value the model can redeem by itself.