keymittAgents use the key. They never see it.

An MCP server that lets AI agents use your API tokens and passwords — from your OS keychain, approved by you, redacted from everything they see.

$ cargo install --locked keymitt

macOS · Windows · Linux·Needs Rust 1.85+. Not on crates.io yet — build from source for now·Installation

Values stay in your keychain

macOS Keychain, Windows Credential Manager or the Linux Secret Service. Agents only ever see names like {{secret:github}}.

Touch ID or your password, Windows Hello, or polkit — a prompt the agent cannot click, showing exactly what will run and where.

Every byte returned to the agent is scrubbed of all your secrets, including their base64, hex, URL-encoded and JSON-escaped forms.

Secrets travel through stdin, environment variables, owner-only temp files or HTTP headers — never through arguments other processes can read.

Decide which programs may receive a secret and which hosts it may be sent to. The agent has no tool to change it.

One encrypted file holds your policy and secrets, and restores on any platform. Exporting always needs strong approval.