keypo-cli
A command line tool that stores keys and encrypted secrets using the Mac Secure Enclave. It keeps sensitive data away from AI agents while staying local.
Share on XNo license declared
Overview
keypo-cli is a set of command line tools for hardware-bound key management and encrypted secret storage on a Mac. It uses the Secure Enclave and passkeys, works local-first without a cloud provider, and is meant to keep sensitive data away from AI agents. The main tool, keypo-signer, creates P-256 keys, signs digests and stores and injects secrets.
Key features
- keypo-signer manages Secure Enclave P-256 keys
- Encrypted vault with iCloud backup
- keypo-openclaw gives OpenClaw hardware-secured secrets
- Optional keypo-wallet adds ERC-4337 smart accounts
- Installs with Homebrew
Best for
Mac users who run AI agents and want secrets to stay under hardware protection instead of being handed to the agent.
- Upstream
- keypo-us/keypo-cli
- Fork on GitHub
- Guo-astro/keypo-cli
- Upstream stars
- 182
- Category
- Security and networking
- Language
- Swift
- License
- No license declaredWithout a license, the author keeps all rights. Ask the upstream owner before reusing the code.
- Forked
- 2026-03-11
- Sync status
- In syncLast synced 2026-10-11
More in Security and networking
mubeng is a Go tool for checking proxy availability and rotating proxy IPs for requests. It helps users manage a proxy pool without extra checking tools when they need a rotating upstream or validation step.
Forked 2026-10-07Last synced 2026-10-11License: Apache-2.0Security and networkingGitHub
A small DNS ad-blocker for ESP32-C3 that stops ad lookups on a network and manages them through a web dashboard.
Forked 2026-10-06Last synced 2026-10-11License: MITSecurity and networkingGitHub
A local tool for checking whether personal information appears in publicly exposed internet sources. It helps people review privacy exposure and keep the process local.
Forked 2026-10-03Last synced 2026-10-11License: MITSecurity and networkingGitHub
GhostTrack is a Python OSINT tool for checking IP addresses, phone numbers, and social media usernames. It runs on Linux or Termux for information gathering and authorized testing.
Forked 2026-09-29Last synced 2026-10-11No license declaredSecurity and networkingGitHub