ValetFS keeps credentials off the machine your AI agent runs on.
The secrets live in a vault on a paired device. When you allow it, they are pushed over an end-to-end encrypted channel into a small local daemon that holds them in memory only and exposes them as a filesystem — FUSE where it is available, a loopback WebDAV endpoint and a CLI where it is not. Nothing the daemon serves is written to that machine's disk.
Closing the pairing starts a grace window you choose (5 minutes to 7 days). When it expires the daemon unmounts and zero-wipes its memory, so access ends on its own instead of waiting for you to rotate every credential the agent saw. You can also end it immediately from the paired device.
There is no server holding secrets. The signaling hub only relays ciphertext so the two peers can find each other, and it drops out of the path once the session is established.
Pairing works either by scanning a QR code the daemon prints, or by pasting a generated prompt into a coding agent, which then installs the daemon and joins the session itself. Two machines can also pair directly with no mobile device involved.
The daemon, CLI and signaling worker are MIT-licensed Go. A free iOS app is available as a convenient vault holder.