Sesame

Sesame proxies authenticated HTTP requests through a user-controlled broker. Use sesame request the way you would use curl; the broker attaches auth server-side based on the target hostname.

Command discovery (do this before saying a command doesn't exist)

This skill documents the sesame request flow in depth, but the CLI is larger than that — it also manages secrets (sesame secret ...), agents (sesame agents ...), deployments (sesame deploy ...), and more. The lists in this file are not the full command surface. Before telling the user that Sesame can't do something, run:

sesame help          # top-level commands
sesame <group> --help   # e.g. sesame secret --help

If the command exists in that output, it exists — use it. Only conclude a capability is missing after sesame help confirms it.

For a one-example-per-command reference — including the exact policy JSON schema for --policy-json (e.g. restricting a secret to GET-only) — see references/commands.md. Read it before guessing argument or policy formats.

Additional documentation — full CLI reference, broker configuration, policy schema, and deployment guides — is available online at https://docs.getsesame.dev.