Quick Start
Install Fida, protect agent reads, and scan secret exposure.
Install
curl -fsSL https://raw.githubusercontent.com/ajipurn/fida/main/install.sh | sh
fida --versionRun in a terminal, the installer offers to set up protection for you. Piped or in CI it stays quiet and just prints fida as the next step.
Protect your agents
fidaBare fida detects every supported agent, installs its redacting gateway and steering for each, and runs a synthetic-secret self-test. Run it again later and it checks for an update instead. Protection is global — one install guards every repository.
Toggle individual agents, or script setup non-interactively:
fida --yes # accept the detected agents without prompting
fida on codex # protect a single agent
fida on # protect every detected agent
fida off codex # remove protection from one agent
fida off # remove protection from all agentsCheck coverage
fida statusfida status also reports how many secrets it has protected in the current repository.
| Level | Meaning |
|---|---|
enforced | A hard native-read hook is installed and the self-test passed. |
best_effort | Gateway and steering are installed, but the agent has no hard hook. |
incomplete | Required artifacts are missing or verification failed. |
inactive | The agent is detected but has no active Fida integration. |
Scan repository risk
fida scan
fida scan --json
fida scan --fail-on highThe scan reports whether a raw secret could reach a detected agent. It never prints a secret value, its length, or any fragment of it.