Getting started

From download to a safe agent key in a few minutes. No terminal required.

1. Install

Download Agent Master Key from the download page, open the disk image, and drag Agent Master Key onto the Applications folder in the window that appears. The published hash identifies the artifact, but does not by itself prove signing, notarization, Gatekeeper acceptance, or stable-launch status.

2. Your trial starts on first launch

Open the app and use every product capability — the 3-day full-access trial starts automatically, no card required. People who obtained access before paid plans launched keep their existing rights; no legacy setup step is required for this build.

3. Turn on the local service

On the Home screen, click Turn on Agent Master Key. This starts a small helper that runs only on your Mac (on 127.0.0.1) and holds your provider keys in AMK's AES-256-GCM encrypted local vault. Wondering why the vault is local instead of cloud-hosted? The AMA Hub compares local-first vs cloud credential storage.

4. Connect an app

Pick an app. AMK is API-key-first: every connector runs through the scoped local broker. Your real credential stays in AMK's encrypted local vault on your Mac and is never uploaded to us.

5. Make a scoped agent key

On Agent Keys, create one amk_live_… key for your agent. You choose which connectors and actions it can reach. Copy the setup into Codex, Hermes, Claude, Cursor, or any MCP agent — no provider secret is copied.

6. Stay in control

Safe reads just work; risky writes wait for your approval; every action is recorded in a local, redacted audit trail. Revoke a key any time, or hit the Kill Switch to pause every agent at once.

Plans after the trial

After the 3-day trial, the full-access plan is $10/month or $99/year — every connector, agent workflow, and bring-your-own-key custom provider capability, with unlimited agents. Scoped keys, approvals, the kill switch, and the redacted audit trail are all included. See pricing.

Connecting and disconnecting agents

Connect as many agents as you like — the full-access plan has no agent limit. To disconnect one, open Advanced → Connected agents, find the agent, and click Disconnect. That revokes its keys immediately; your provider accounts and their credentials stay untouched, and reconnecting an agent you already had just works.

Reinstalling or replacing your Mac

Reinstall on your Mac any time — a fresh install starts a new 3-day trial, and an active subscription or license keeps working on the Mac it is bound to. Licenses granted before paid plans launched keep their original same-Mac rights.

Removing everything

Uninstalling removes the app. A full clean (in the app's recovery guide) removes Agent Master Key's local state — vault, agent keys, audit history, and connector configurations. Your connected provider accounts are unaffected — revoke those tokens in each provider's dashboard if you want.