Getting started

From download to a safe agent key in a few minutes. No terminal required.

1. Install

Download Agent Master Key from the download page, open the disk image, and drag Agent Master Key onto the Applications folder in the window that appears. The published hash identifies the artifact, but does not by itself prove signing, notarization, Gatekeeper acceptance, or stable-launch status.

2. Launch access is included

Open the app and use every product capability. People who obtained access before the free launch keep their existing rights; no legacy setup step is required for this build.

3. Turn on the local service

On the Home screen, click Turn on Agent Master Key. This starts a small helper that runs only on your Mac (on 127.0.0.1) and holds your provider keys in AMK's AES-256-GCM encrypted local vault. Wondering why the vault is local instead of cloud-hosted? The AMA Hub compares local-first vs cloud credential storage.

4. Connect an app

Pick an app. AMK is API-key-first: every connector runs through the scoped local broker. Your real credential stays in AMK's encrypted local vault on your Mac and is never uploaded to us.

5. Make a scoped agent key

On Agent Keys, create one amk_live_… key for your agent. You choose which connectors and actions it can reach. Copy the setup into Codex, Hermes, Claude, Cursor, or any MCP agent — no provider secret is copied.

6. Stay in control

Safe reads just work; risky writes wait for your approval; every action is recorded in a local, redacted audit trail. Revoke a key any time, or hit the Kill Switch to pause every agent at once.

Plans during the free launch

This free launch includes every connector, agent workflow, and bring-your-own-key custom provider capability. Scoped keys, approvals, the kill switch, and the redacted audit trail remain on for everyone. Material terms for later releases will be announced on the blog at least seven days in advance.

Connecting and disconnecting agents

Connect as many agents as you like during the free launch — there is no slot limit. To disconnect one, open Advanced → Connected agents, find the agent, and click Disconnect. That revokes its keys immediately; your provider accounts and their credentials stay untouched, and reconnecting an agent you already had just works.

Reinstalling or replacing your Mac

During the free launch, install on whatever Mac you like and reinstall freely — everything lives locally on the Mac you install on. If you bought a license before the free launch, it stays bound to that Mac's serial identity and keeps working there as before.

Removing everything

Uninstalling removes the app. A full clean (in the app's recovery guide) removes Agent Master Key's local state — vault, agent keys, audit history, and connector configurations. Your connected provider accounts are unaffected — revoke those tokens in each provider's dashboard if you want.