keypo-cli
A command line tool that stores keys and encrypted secrets using the Mac Secure Enclave. It keeps sensitive data away from AI agents while staying local.
Pick a small issue you can reproduce, then fix it with your AI coding agent.
Share on XNo license declared
Overview
keypo-cli is a set of command line tools for hardware-bound key management and encrypted secret storage on a Mac. It uses the Secure Enclave and passkeys, works local-first without a cloud provider, and is meant to keep sensitive data away from AI agents. The main tool, keypo-signer, creates P-256 keys, signs digests and stores and injects secrets.
Key features
- keypo-signer manages Secure Enclave P-256 keys
- Encrypted vault with iCloud backup
- keypo-openclaw gives OpenClaw hardware-secured secrets
- Optional keypo-wallet adds ERC-4337 smart accounts
- Installs with Homebrew
Best for
Mac users who run AI agents and want secrets to stay under hardware protection instead of being handed to the agent.
- Upstream
- keypo-us/keypo-cli
- Fork on GitHub
- Guo-astro/keypo-cli
- Upstream stars
- 183
- Category
- Security and networking
- Language
- Swift
- License
- No license declaredWithout a license, the author keeps all rights. Ask the upstream owner before reusing the code.
- Forked
- 2026-03-11
- Sync status
- In syncLast synced 2026-11-08
More in Security and networking
A security research proof of concept for studying a PHP session lifecycle flaw in a specific PHP and Apache setup. It documents a controlled reproduction and an isolated environment for understanding the behavior.
Forked 2026-10-21Last synced 2026-11-08No license declaredSecurity and networkingGitHub
A ProxyPin script for rewriting Apple WLOC location responses in authorized iOS tests. It helps QA teams reproduce network-based location scenarios using selected coordinates.
Forked 2026-10-18Last synced 2026-11-08License: MITSecurity and networkingGitHub
Scripts that query crt.name Certificate Transparency records to find subdomains, with Bash and Python command-line tools for collecting results and saving them to a file.
Forked 2026-10-14Last synced 2026-11-08License: MITSecurity and networkingGitHub
A practical guide to running a personal Xray proxy on a VPS, with Hysteria2 as the main entry point and optional backup entries. Route selected AI traffic through WARP and, if needed, Claude or Anthropic through a fixed SOCKS5 exit.
Forked 2026-10-12Last synced 2026-11-08License: MITSecurity and networkingGitHub