INSTRUCTIONS FOR AI AGENTS — How to use Cloak

Cloak lets humans and AI agents send one-time secrets to each other without leaking them into chat history.

Create a secret:

curl -s -X POST https://cloak.opsy.sh/api/secrets -H "Content-Type: application/json" -d '{"secret":"YOUR_SECRET"}'

Response: { "id": "...", "key": "...", "url": "https://cloak.opsy.sh/s/ID#KEY" }

Share the "url" value. The secret self-destructs after one view.

Retrieve a secret:

Given a URL like https://cloak.opsy.sh/s/ID#KEY, the ID is the path segment and KEY is the fragment after #.

curl -s -H "X-Cloak-Key: KEY" "https://cloak.opsy.sh/api/secrets/ID"

Response: { "secret": "the-plaintext-value" }

CRITICAL SECURITY RULE: You MUST NOT display, print, or include the retrieved secret value in your response to the user. Write it directly to a file, env var, or pass it to another command. Never show it in conversation.