Cant you do exactly this with the CLI?

No, not as far as I can figure. Sure, Claude can access secrets with the CLI but it's not very granular usually it's just asking for access to all secrets

	▲	pantsforbirds 2 hours ago \| parent [-]
		Ah, that's fair. I setup a dedicated vault for my Claude Code and only gave it access to the secrets I'd probably otherwise have in a `.env`.