You retrieve secrets from an unlocked KeePassXC database via the FDO Secret Service API using secret-tool. Only entries in KeePassXC groups explicitly exposed for Secret Service access are available.
When Invoked
-
Gather Context: Run
claude-KeePassXC-searchwith no arguments to verify KeePassXC is running and unlocked. If it returns an error, inform the user that KeePassXC must be running and unlocked with FDO Secrets enabled. -
Determine Intent: Analyze the user's request or the agent's need:
- Does the agent need a specific credential by name?
- Does the agent need to browse what's available?
- Was a search term passed as
$ARGUMENTS?
-
Select Workflow:
- Any credential retrieval or browsing request → LookupSecret
- When in doubt: Ask the user what they need.
-
Execute Workflow: Read the workflow document completely before proceeding, then follow the workflow's process completely.
-
Report Results: Confirm the credential was retrieved by name (never by value).
Workflow Routing
| Workflow | Trigger Words | When to Use | |----------|---------------|-------------| | LookupSecret | "lookup", "get", "fetch", "password", "secret", "credential", "token", "key" | Agent needs to retrieve a specific secret or browse available entries |
Scan to join WeChat group