Keychains.dev: Secure Credential Proxy for AI Agents to Access APIs Without Exposing Credentials
By
alban
Leave it on the tray for the seagulls.
Summary
Keychains.dev is a secure credential proxy service for AI agents that allows them to access over 11,000 APIs without exposing credentials. It works as a drop-in replacement for curl, replacing hard-coded credentials with template variables that get injected server-side. The system is designed to be immune to prompt injection attacks, provides user permission controls with one-click approvals and revocations, and maintains a full audit trail.
Key quotes
· 5 pulledKeychains.dev is a secure credential proxy for AI agents
Use 'keychains curl' as a drop-in for curl — just replace hard-coded credentials with template variables like {{GITHUB_TOKEN}}
Your agent never sees raw secrets — immune to prompt injection by design
Users approve each permission with one click and can revoke access anytime
Works with 11,000+ API providers (OAuth, API keys, basic auth)
You might also wanna read
OneCLI: Open-Source Credential Vault for Secure AI Agent API Access
OneCLI is an open-source credential vault and gateway designed specifically for AI agents. It acts as a secure intermediary between AI agent
github.com·2mo ago
Keycard: Local-First Secret Management Tool for Developers and AI Teams
Keycard is a local-first secret management tool for developers and AI teams that stores API keys and secrets in a local SQLite database on m
keycard.studio·1mo ago
Using HTTP Proxies to Secure Credentials in Claude Code Sandboxes
The article discusses security measures for AI coding assistants like Claude Code, focusing on using HTTP proxies to prevent credential expo
joinformal.com·4mo agoShow HN: Kontext CLI – Credential broker for AI coding agents in Go
NanoClaw Adopts OneCLI Agent Vault for Enhanced Security and Credential Management
NanoClaw is adopting OneCLI's Agent Vault as its default credential and proxying layer, replacing its previous credential proxy system. The
nanoclaw.dev·2mo ago
KeyLeak Detector: Open-Source Tool for Scanning Websites for Exposed API Keys and Secrets
KeyLeak Detector is an open-source web application that scans websites for exposed API keys, secrets, and sensitive data. It uses headless b
github.com·7mo ago