Stripe CLI hardener
Run av harden stripe to apply this hardener and
av doctor stripe to verify it.
How Automic Vault Hardens
stripe
av harden stripe installs the patched Stripe CLI fork
from the Automic Vault Isotopes tap as stripe-isotope when
Homebrew is available. av doctor stripe reports when an
existing stripe-cli installation needs to be replaced. Run
brew update, then av harden stripe to install
the renamed Isotope. Without Homebrew it installs the same signed
release at /usr/local/bin/stripe;
av doctor stripe reports direct install updates. On macOS
it stores and retrieves Stripe CLI credentials through the authenticated
Automic Vault XPC broker instead of Keychain or plaintext fallback
files.
Credential reads use the Stripe Secret Gate, so the configured per-Launcher policy, Approval, and Authorization History apply to each use.
Existing API keys, sessions, and user access tokens are moved from
the StripeCLI Keychain service or
credentials.json; plaintext API keys in
config.toml are replaced with redacted markers only after
the Vault writes succeed.