Connect Devin Desktop to Agent Master Key
Agent Master Key (AMK) gives Devin Desktop its own scoped, revocable key while your real provider keys stay in an encrypted vault on your Mac. AMK connects Devin Desktop as a one-click connect harness.
How it works
- Download Agent Master Key and connect a provider (your key never leaves the Mac).
- Open Connect an agent and pick Devin Desktop. AMK creates a scoped agent key and merges the connection into the config below (backup first).
- Restart Devin Desktop so it picks up the AMK connection.
Config file
~/.config/devin/mcp_config.json
Current Devin setup
This setup targets Devin CLI v3000.3+ and Devin Desktop's default Devin Local agent. They share the same user-scoped MCP file and mcpServers.amk entry: connect once; reconnecting either surface updates the shared AMK profile. Revoking that profile affects both surfaces using it.
The Windsurf-era files ~/.codeium/windsurf/mcp_config.json and ~/.codeium/windsurf-next/mcp_config.json are separate editor-discovery compatibility paths, not the default setup above. AMK does not import, overwrite, or delete those files when connecting to the current path.
If your installed AMK build still targets the older path and you have AMK's optional connector-router CLI installed, select the current file explicitly with connector-router setup devin-desktop --profile YOUR_EXISTING_AMK_PROFILE --config ~/.config/devin/mcp_config.json --write. Replace YOUR_EXISTING_AMK_PROFILE with the existing AMK profile ID you already use; this command writes configuration, not a new profile. The macOS app does not imply that the CLI is on your shell's PATH. If XDG_CONFIG_HOME is set, use $XDG_CONFIG_HOME/devin/mcp_config.json with --config instead; dashboard one-click setup uses the default path above. Only select an editor/legacy path explicitly when your installed client uses it.
Official configuration references: Devin CLI / Devin Local and legacy Cascade and editor discovery. This is local setup, not a Devin Cloud connection.
The entry points at AMK's local launcher only — it never contains your provider keys or an agent key. Revoke Devin Desktop's access anytime from the AMK dashboard; revocation takes effect immediately.
More: Getting started · Trust & custody · Compare
