Does your coding agent have access to all your environment variables?

When I run a coding agent on a local project, it can inherit the environment variables from my shell.

That may include unrelated API keys or credentials for other projects. I’m curious how people handle this in practice.

Do you use a separate shell/session, an environment allowlist, direnv, Docker, a wrapper script, or something else?

I’m mainly interested in practical developer setups rather than enterprise platforms.