What problem does it solve?
Replace an external credential gateway with a local, built-in credential proxy so containers receive API keys or OAuth tokens directly from a machine-managed .env file, eliminating the need to install and configure OneCLI for credential delivery.
Core Features & Use Cases
- Local .env-based credential injection: Reads ANTHROPIC_API_KEY or CLAUDE_CODE_OAUTH_TOKEN from .env and exposes them to containers via a local HTTP proxy.
- Claude and Anthropic support: Works with Claude subscription tokens obtained via claude setup-token or standard Anthropic API keys.
- Minimal infrastructure: Uses a platform-aware bind address and default proxy port 3001, suitable for local Docker, WSL, and systemd-managed environments.
- Developer workflow integration: Provides git merge instructions to apply the skill branch, test steps to validate proxy startup, and explicit rollback steps to revert to OneCLI if needed.
- Use case: Ideal for developers who want a simple, self-hosted credential flow for Nanoclaw agents without adding external CLIs or services.
Quick Start
Merge the native-credential-proxy branch, add your Anthropic API key or Claude OAuth token to .env, and restart Nanoclaw so the local proxy injects credentials into running containers.