Quick Start

From zero to full AI visibility in 5 minutes.

1

Scan your AI chat history

See what secrets are already in your AI prompts. Takes 15 seconds.

# Install the scanner
$ pip install citrusglaze-scan
# Run it
$ citrusglaze-scan

Requires Python 3.8+. Scans Claude, Cursor, Copilot, ChatGPT, and 35+ more AI tools. 100% local.

2

Install the proxy

The proxy sits between your AI tools and the internet. It scans every request in real-time.

# Full install (CitrusGlaze + nono sandbox)
$ bash install.sh
# Start the proxy
$ citrusglaze start

What install.sh does:

  • 1. Downloads the CitrusGlaze binary for your platform
  • 2. Generates a local root CA certificate
  • 3. Prompts you to trust the CA (required for HTTPS inspection)
  • 4. Installs the nono sandbox for filesystem/process isolation
  • 5. Creates the configuration at ~/.citrusglaze/
3

Use your AI tools normally

The proxy intercepts AI traffic transparently. Use your tools as usual.

# Wrap any command with full L1-L7 security
$ citrusglaze wrap claude
# Or wrap your own scripts
$ citrusglaze wrap python my_agent.py
# Check the dashboard
$ citrusglaze status

What it detects

CRITICAL

  • AWS access keys & secret keys
  • RSA/EC/Ed25519 private keys
  • Database connection URIs
  • GCP service account keys
  • Azure subscription keys

HIGH

  • GitHub/GitLab/Bitbucket tokens
  • Slack/Discord webhooks & tokens
  • Stripe/PayPal API keys
  • JWT tokens
  • OpenAI/Anthropic/Google AI keys

254+ total patterns. Full list in the GitHub repo.

Compatible AI tools

Claude Code
Claude Desktop
Cursor
GitHub Copilot
ChatGPT Desktop
Gemini
Windsurf
Cody
Continue
Aider
OpenAI SDK
Anthropic SDK
pip
npm
git
...and 24 more

15/15 end-to-end compatibility tests pass. Zero performance degradation.

Troubleshooting

Certificate trust error ▾

The proxy needs a trusted root CA to inspect HTTPS traffic. Run:

$ citrusglaze trust-cert

This adds the CitrusGlaze CA to your system keychain. You'll be prompted for your macOS password.

Tool not working through the proxy ▾

Some tools use custom certificate stores. Set the environment variable:

$ export NODE_EXTRA_CA_CERTS=~/.citrusglaze/ca.pem
$ export REQUESTS_CA_BUNDLE=~/.citrusglaze/ca.pem

Or use citrusglaze wrap which sets these automatically.

Proxy not starting ▾

Check if port 8888 is already in use:

$ lsof -i :8888

If another process is using the port, stop it or configure a different port in ~/.citrusglaze/config.toml.