Keyward
Local, encrypted secret broker for AI agents. Any MCP tool request an API key by name; you approve in a native OS prompt; only that key is injected into your project — the model never sees the value.
Cost / License
- Free
- Open Source (MIT)
Platforms
- Mac
- Windows
- Linux
- Homebrew
Features
- Golang
- Model Context Protocol (MCP) Support
- Secrets Management
Keyward News & Activities
Recent activities
Keyward information
Developed by
arturayupov Licensing
Open Source (MIT) and Free product.Written in
Alternatives
51 alternatives listedSupported Languages
- English
AlternativeTo Categories
AI Tools & Services, Development, Security & PrivacyGitHub repository
- 1 Stars
- 0 Forks
- 0 Open Issues
- Updated
What is Keyward?
I kept pasting API keys into Claude Code/Cursor, which dumps them into context and transcripts — and re-typing the same keys in every project. keyward keeps keys in one age-encrypted vault (master key in the OS keystore); AI tools request a key by name over MCP, you approve the single request in a native OS dialog, and only that key is injected into the project's .env. The model never receives the value. MIT, single Go binary, macOS/Windows/Linux. Storage is solved (Keychain, pass, sops, 1Password) — the missing piece was an agent-facing, approval-gated broker. Honest limits: it raises the bar, not a substitute for OS security; Linux needs libsecret; Windows file ACLs are a v1 item. Feedback welcome, especially on the approval UX.