keyhole

keyhole is a CLI tool that lets you securely hand API keys and secrets to AI coding agents without pasting them into chat windows. When an agent needs a secret, keyhole opens a localhost form where you enter the value once. The agent receives only a reference command to retrieve it at runtime, keeping the actual secret confined to your machine.

Designed for developers using AI agents like Claude CLI, keyhole stores secrets in macOS Keychain, environment files, or raw files with restricted permissions. It includes security guards like localhost-only binding, single-use URLs, and cross-origin POST rejection. The maker says it was vibe-coded as a personal project to improve the experience of working with AI agents.