keypo-cli

A command line tool that stores keys and encrypted secrets using the Mac Secure Enclave. It keeps sensitive data away from AI agents while staying local.

Browse open issues

Pick a small issue you can reproduce, then fix it with your AI coding agent.

Share on XNo license declared

Overview

keypo-cli is a set of command line tools for hardware-bound key management and encrypted secret storage on a Mac. It uses the Secure Enclave and passkeys, works local-first without a cloud provider, and is meant to keep sensitive data away from AI agents. The main tool, keypo-signer, creates P-256 keys, signs digests and stores and injects secrets.

Key features

  • keypo-signer manages Secure Enclave P-256 keys
  • Encrypted vault with iCloud backup
  • keypo-openclaw gives OpenClaw hardware-secured secrets
  • Optional keypo-wallet adds ERC-4337 smart accounts
  • Installs with Homebrew

Best for

Mac users who run AI agents and want secrets to stay under hardware protection instead of being handed to the agent.

Upstream
keypo-us/keypo-cli
Fork on GitHub
Guo-astro/keypo-cli
Upstream stars
182
Category
Security and networking
Language
Swift
License
No license declaredWithout a license, the author keeps all rights. Ask the upstream owner before reusing the code.
Forked
2026-03-11
Sync status
In syncLast synced 2026-10-19