CLI · ANY AGENT

Stop pasting secrets into your agent.

Your agent needs an API key. Normally you'd paste it into the chat — where it lands in the context window, transcript, and every log. keyhole hands it a reference instead.

$claude plugin add github:maferland/keyhole
Runs on Node · macOS, Linux · MIT licensed
You — on localhost
Your agent — all it ever sees
127.0.0.1:54213/s/8f3a2c…
Your agent needs a secret
OpenAI key for the ingest script
OPENAI_API_KEY
sk-••••••••••••••••••
localhost only · single-use · value never leaves this machine
agent session
I need OPENAI_API_KEY to run the ingest script.
→ opened keyhole on localhost, waiting…
✓ stored
{
  "name": "OPENAI_API_KEY",
  "dest": keychain:OPENAI_API_KEY,
  "retrieve": security find-generic-password -s OPENAI_API_KEY -a $USER -w
}
Got a reference — not the key.
encrypted at rest · macOS Keychain
↑ pick a destination — the reference the agent gets updates live, the value never does
The old way
you: sk-live-1a2b3c…
↳ now in the context window, the transcript, and every log line
Once it's in the chat, you can't get it back out. Rotate the key and move on.
The keyhole way
agent: keychain:OPENAI_API_KEY
↳ a reference to the stored secret. The value lives in your Keychain, not the chat.
The secret lands in your Keychain. The agent never holds it — just a pointer to it.
How it works
01
Agent asks
It runs keyhole NAME instead of asking you to paste a key into the chat.
02
You type it
A form opens on a random localhost URL. The value goes straight to your chosen store.
03
Agent gets a ref
It receives a one-line retrieve command — and resolves the key only at runtime.
Destinations
keychainencrypted at rest · macOS
file:/pathraw value · mode 0600
env:/pathNAME=value lines · 0600
Guards
✓binds 127.0.0.1 only · Host must be loopback
✓random URL token per run · all else 404s
✓rejects cross-origin POSTs
✓single-use · stores once, then 409s

Hand over the key. Not the keys to the kingdom.

$claude plugin add github:maferland/keyhole
Runs on Node · macOS, Linux · MIT licensed