AGENT MASTER KEY
Menu

Give every AI agent its own key.Keep yours on your Mac.

Agent Master Key keeps your provider API keys in an encrypted vault on your Mac. Each agent gets its own limited key, and one click shuts it off.

Download for Mac

macOS 14+ · Apple Silicon · closed-source free preview · no account or email

Install details & SHA-256
See Agent Master Key in actionProduct demo
Edited demo of an earlier build, with sample data and illustrative outcomes. Some screens may differ from the current app.
Read the demo summary

The demo illustrates connecting a sample app, creating an agent key, an allowed request, and revoking the key. It then illustrates a blocked request. Completed work is not undone.

An interactive example

Give an agent a job.
Keep the control.

See what happens when an agent makes a request—and what changes when you take access back.

Try it yourselfThis is an illustration, not a live connection. No keys, accounts, or services are used.
Example requestSimulation
Example agent

Search for Mac automation documentation

AgentExample agent
Agent Master KeyNot yet allowed
ServiceExample service
Your decision matters

Enable JavaScript to try the example.

The agent never sees the provider key in this example. Revocation does not undo completed work or stop a request already in progress. This example does not verify behavior across restarts.

See it shut off

Confirmation asking to turn off every agent key. The dialog says provider keys stay in the vault.
Something looks wrong? Pause every agent.
The kill switch is on. The screen says all agent keys are off and can be turned back on.
Agents are paused. Your provider keys stay in the vault. Flip it back anytime.
A local audit list of connector calls. The bottom entry is marked denied.
A local log of what each agent did.

It won't stop an attack. It limits what an agent can grab.

Download for Mac

Your keys stay put.

Provider API keys live in an encrypted vault on your Mac, not in agent config files.

One key per agent.

Each agent gets its own limited key, so you can see and control each one separately.

One click to shut it off.

Turn off an agent's key without rotating your real provider keys. There's an audit trail and a connectors dashboard for everything else.

FAQ

What does my agent actually get?+

Its own limited key that works through AMK on your Mac. It can reach only the connectors and actions you allow, not your real provider keys.

Where are my provider keys?+

In an encrypted vault on your Mac. AMK doesn't upload them.

What doesn't it do?+

AMK is a closed-source macOS app that limits what an agent can grab. It doesn't isolate a malicious program already running as your macOS user. For hard separation, use separate macOS user accounts. Turning off a key doesn't undo work an agent already finished.

What Mac do I need?+

An Apple Silicon Mac (M1 or newer) on macOS 14 or later.

Does it cost anything?+

It's a free public preview. No account or email needed.

See all 44 connectors in the catalog

Download for Mac

Download for Mac

macOS 14+ · Apple Silicon · closed-source free preview · no account or email

Agent Master KeymacOS 14+ · closed-source free previewDownload