Stroq reads your own Claude Code and Codex sessions and shows how many commands came from text your agent read, and which keys left your machine.
An example: a made-up machine with made-up sessions, keys and hosts. Hoo is Stroq's owl. Your card shows your own sessions.
npx @stroq/cli
It reads your last 30 days of sessions, your key files and the folders your agent worked in; prints key names, never values; writes nothing but a small cache under ~/.stroq
; and sends nothing. No account, no telemetry.
npx @stroq/cli a card of your own sessions, like the one above
npx @stroq/cli init stop it next time: guard your agent
npx @stroq/cli why why an action was stopped
npx @stroq/cli attack watch Stroq stop 36 known attacks, in a sandbox
npx @stroq/cli uninstall remove Stroq
Every moment on the card has a stroq show
line that prints the evidence behind it (npx @stroq/cli show 1
). stroq help --all
lists the other commands. Needs Node.js 22 or newer. Apache-2.0.
Stroq is a local security platform for AI coding agents: Claude…