keyward runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 22 Jun 2026.
Local encrypted secret broker for AI agents: request keys by name, approve each use over MCP.
Nothing serious here today
Today is the operative word: we check keyward every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Alternatives to keyward
same job, measured the same wayEncrypted secrets vault for AI agents — secrets resolved at runtime, never seen by LLMs.
OS keychain secrets for AI coding agents, over MCP.
Local AES-256-GCM vault for AI agents. Secrets stay local, LLMs never see real API keys.
Encrypted secrets and credential management for agents
Encrypted store for API keys and database URLs your code needs. Use them without reading them.
Secure P2P file transfer and encrypted chat for AI agents. No accounts, no API keys.
Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.
Local MCP access to approved 1Password fields without exposing plaintext secrets to AI agents.
keyward — questions
Answers built from our own checks of this server.