keypo-cli

A command line tool that stores keys and encrypted secrets using the Mac Secure Enclave. It keeps sensitive data away from AI agents while staying local.

Share on XNo license declared

Overview

keypo-cli is a set of command line tools for hardware-bound key management and encrypted secret storage on a Mac. It uses the Secure Enclave and passkeys, works local-first without a cloud provider, and is meant to keep sensitive data away from AI agents. The main tool, keypo-signer, creates P-256 keys, signs digests and stores and injects secrets.

Key features

  • keypo-signer manages Secure Enclave P-256 keys
  • Encrypted vault with iCloud backup
  • keypo-openclaw gives OpenClaw hardware-secured secrets
  • Optional keypo-wallet adds ERC-4337 smart accounts
  • Installs with Homebrew

Best for

Mac users who run AI agents and want secrets to stay under hardware protection instead of being handed to the agent.

Upstream
keypo-us/keypo-cli
Fork on GitHub
Guo-astro/keypo-cli
Upstream stars
182
Category
Security and networking
Language
Swift
License
No license declaredWithout a license, the author keeps all rights. Ask the upstream owner before reusing the code.
Forked
2026-03-11
Sync status
In syncLast synced 2026-09-29