Keyclasp

Keyclasp provides a secure solution for managing and injecting runtime secrets into coding agents, helping to keep API keys out of prompts and project files. By utilizing a local encrypted vault, Keyclasp allows developers to store sensitive credentials securely and access them via trusted command names without exposing plaintext secrets.

Key Features

• Local Encryption: All credentials are stored in an encrypted format using AES-256-GCM, ensuring that sensitive information remains secure and inaccessible to unauthorized users.
• Controlled Access: Inject secrets into commands while limiting exposure, reducing the risk of accidental leaks to other processes or outputs. Keyclasp captures potential output leaks by suppressing sensitive data in command responses.
• Ease of Use: Using a simple command structure, Keyclasp enables educated control over which secrets are provided to running agents, limiting them to just what is necessary for specific executions.

Quick Start Example

To demonstrate the functionality of Keyclasp, follow this quick example for setting up a demo vault and using a dummy credential:

1. Create a Temporary Vault Execute the following commands to set up a local demo vault:

   demo_vault=$(mktemp -d)
   export KEYCLASP_HOME="$demo_vault"
   keyclasp init --machine-only
   

2. Store a Dummy Credential Store a sample API key for demonstration:

   printf '%s' 'dummy-key-for-keyclasp' | keyclasp set DEMO_KEY --project demo --environment local
   

3. Run a Command Using the Credential Execute a command through Keyclasp to verify that the credential is accessible:

   keyclasp run --project demo --environment local --env DEMO_KEY -- node -e 'console.log("Credential available:", Boolean(process.env.DEMO_KEY))'
   

   Expected output:

   Credential available: true
   

Comparison with Other Tools

Keyclasp differs from alternatives like 1Password op run by offering a local-first approach that eliminates the need for cloud dependencies, providing a more straightforward and autonomous method for managing secrets tailored specifically for coding agents.

Documentation and Resources

• Explore Getting Started for comprehensive installation and configuration guidance.
• Access the Command Reference for detailed information on commands and their usage.
• Review the Security Model to understand the measures taken to protect your sensitive data.

Keyclasp is designed for developers seeking to enhance security and control over runtime credential management without additional cloud complications.