Your AI agent can read your .env
Your secrets don't belong in AI context.
Cursor, Copilot, and Claude can read every .env file in your project. Keyway keeps secrets in memory — invisible to AI, gone when the process stops.
brew install keywaysh/tap/keywayThen run: keyway init · Other install options
What your AI assistant sees
Every file in your project is context. Including .env.
Built for the AI era
Three primitives that keep your secrets safe — from humans and machines.
keyway run
Zero-trust mode
Inject secrets directly into process memory. No .env file on disk, invisible to AI agents, gone when the process stops.
MCP Server
AI-native secrets
Let AI assistants manage secrets through the Model Context Protocol — with scoped access and full audit trail.
GitHub-native access
No new credentials
Repo access = secret access. When someone leaves, revoke their GitHub access. No secrets to rotate.
Open source. Self-hostable. Yours.
Audit every line of code. Run it on your infrastructure. Contribute on GitHub.
Backend
Fastify API + PostgreSQL
keywaysh/keyway
Dashboard
Next.js 15 web app
keywaysh/keyway
CLI
Go, Homebrew / npm
keywaysh/keyway
Crypto Service
Isolated gRPC microservice
keywaysh/keyway
Everything is open source — including the Dashboard, MCP Server, and Docs.
Built for real workflows
From onboarding to offboarding, Keyway fits how teams actually work.
New dev joins? Productive in minutes.
GitHub repo access = secret access. No invites, no Slack scavenger hunts.
Dev leaves? Secrets stay safe.
Remove GitHub access, Keyway access revoked automatically. Zero secrets to rotate.
Same secrets, every deploy.
Sync to Vercel, Netlify, Railway. Local, staging, production — always in sync.
AI can't read what's not on disk.
keyway run keeps secrets in memory. Your AI agent sees nothing.
Sync to your stack
Connect your deployment platform. Push once, sync everywhere.
Everything you'd expect
Security-first architecture. No shortcuts.
AES-256-GCM
Industry-standard encryption, unique IV per secret
Isolated crypto service
Encryption key never touches the API server
Full audit trail
Who accessed what, when, from where
Version history
Full history with diff and rollback
Provider sync
Sync to Vercel, Netlify, and Railway
TLS 1.3 everywhere
End-to-end encryption in transit, no exceptions
"I built Keyway after watching Claude autocomplete a database password from a .env file during a live demo. AI agents are incredibly useful — but they shouldn't see your production secrets."
Software Engineer & CTO, Founder of Keyway
Your secrets don't belong in AI context.
Set up in 30 seconds. Free for solo developers.