From the Creator of Homebrew

Your secrets manager should know what the secrets do.

Secure your command-line credentials, give agents bounded capabilities, and approve operations across your Macs.

Free and open source. Your existing commands keep working. No agent plugin required.

Secure your command line

Find credentials that tools, dependencies, and agents can read from your files or credential helpers. Each Finding explains the exposure and what you can do about it.

Harden a supported Tool to move its credentials into the macOS Data Protection Keychain and put an Authorization Gate at the point of use. Keep using your usual terminal and commands.

Find your tools

curl -fsSL https://www.automicvault.com/scanner.sh | bash

Downloads a small standalone scanner built from the latest release sources, verifies its signature, and runs it in a read-only sandbox with no network access.

A clean Scan covers the checks AV supports. It does not certify your whole machine as secure.

Automic Vault Detectors showing supported tools, hardener availability, and the selected detector’s trigger conditions — See what AV checks and which tools have a Hardener.

Decide what your tools and agents can do

Let your agent read GitHub issues while writes need your Approval. Give your terminal a different policy. Each Authorization Gate applies the rules you choose for each Verified Launcher.

AV checks the complete operation before applying a credential. Write Access still leaves disclosure and elevated credential use behind Approval. Unknown operations always need a human decision.

For an eligible agent task, grant ten active minutes of Write Access at one gate. You can extend, suspend, or end that grant from its visible controls.

Choose how much authority to give

Code signing establishes software identity and integrity, not intent. Task identifiers narrow temporary grants; they do not establish identity.

GitHub Authorization Gate with Read Only access for ChatGPT and Approval Required for other eligible apps — One Tool, with a policy for each Verified Launcher.

Give agents the capabilities they need

Let an agent prepare release notes while a reviewed script publishes to GitHub and updates your CDN. A Blessed Script binds exact contents and declared capabilities to your review.

A reentrant script pauses for agent input, exposes fixed entry points for context, then continues the deterministic work. AV authorizes each invocation. Editing the script invalidates its Blessing.

Build a reviewed agent workflow

Validate agent output before using it. Keep Secret Values within the script’s execution; a Blessing does not make its code trustworthy.

ChatGPT invokes the publication script. AV shows its declared capabilities and identifies ChatGPT as the Verified Launcher before Approval.

Keep project secrets out of plaintext files

Use the same Secret Name across projects with a different Project Value for each. AV selects the nearest matching physical directory, or the Global Value when no Project Value matches.

For compatible HTTP clients, the Secret Proxy gives your application a temporary reference and applies the real credential only to approved destinations.

Understand Project Values Explore credential proxying

Directories select Values; they grant no authority. Policy covers all Values of a Secret Name. Proxy references are bearer values that can exercise already-granted session access.

One Secret Name, with a Global Value and two Project Values. Secret Values stay hidden.

Approve operations across your Macs

Review requests from your enrolled Macs on eligible iPhones using the same iCloud Keychain account. See the operation you’re being asked to allow, wherever it originated.

Each Mac keeps its Secrets, policy, and Authorization History, and enforces the decision locally. You can also enable Touch ID Approval on a Mac for biometric-only allow actions.

Set up iPhone and Touch ID Approval

iPhone Approval removes pointer- and keyboard-driven allow actions on the Mac. Disable iPhone Mirroring and Show on Mac, or require Face ID or Touch ID on every eligible iPhone. An unavailable relay never enables a fallback.

Two pending requests, from Maliwan and Pangolin, on one iPhone.

Know the boundary

AV protects supported credentials and sensitive Tool operations against code running with your normal user privileges. Root or kernel compromise, arbitrary local destruction, and a Target’s behavior after receiving a Secret remain outside that boundary.

Read the security model

See how your credentials were used

Authorization History keeps local records of allowed and denied requests. AV persists and verifies the record of an allowed Secret Use before releasing the Secret. History is bounded; it is not a tamper-resistant or complete forensic log.

Canonical definitions

Free. Open source. macOS.

The Mac app costs nothing and ships under Apache-2.0. Optional iPhone Approval requires an active subscription to send allow responses. Denying a request does not require a subscription.