One place for every API key. Routes to the best available provider automatically. Tracks exactly what's being used. Everything stays on your Mac.
macOS 13 or later · Apple Silicon & Intel · Open source
App screenshot coming soon
When you move beyond managed AI tools, you hit the same wall. Keys scattered everywhere, no visibility, and a nagging worry about accidentally spending money.
Not just secure storage. It actively routes your requests to the best available provider and keeps a clear record of what's being used — all without leaving your Mac.
Like a wallet for your AI access — one place to keep everything, always with you, opened with your fingerprint.
Set your preferred provider order once. Saferkeys picks the first healthy, configured one — and routes around limits or outages automatically.
Track which apps are using which providers, how many calls this month, and which keys are actually working.
Drag providers into your preferred order. Saferkeys works through the list — skipping anything that's down, at its limit, or not configured — and hands the right key to whichever app needs it.
Apps never ask for a specific provider. They ask for a capability — "I need an LLM", "I need a search provider" — and Saferkeys resolves it. Swap providers in the priority list without touching a single app configuration.
LLMs, search, embeddings, speech, image generation, web scraping. Add any provider that's missing as a custom entry — the registry is open source.
LLMs, search, audio, image generation, embeddings, and web scraping. Don't see yours? Add it as a custom entry — the registry is open source.
Need one that's not listed? Add a custom entry with any name and environment variable — GitHub tokens, Notion integrations, anything. Stored and routed the same way. Or contribute it to the open source registry.
Saferkeys tracks every request made through it — which provider, which app, how many calls today and this month. All local, never sent anywhere.
Coming from a subscription tool where you had no visibility into usage? This is the clarity you've been missing. You'll know immediately if something is burning through calls — and which app is doing it.
Saferkeys exposes a simple local HTTP API. Your scripts and tools request keys by capability — Saferkeys handles routing, fallback, and the user approves access once.
No SDK. No config files. No hardcoded keys in your code. Any language that can make an HTTP request can use Saferkeys. The key never touches your codebase.
llm, search, tts — Saferkeys picks the right provider
localhost:5753, no internet required
Four steps — after that, your keys are there whenever anything needs them.
Runs quietly in the background. Copy any key in one click without opening the full app. Set it to start at login — you'll never think about it.
Touch the sensor. The app opens. Your keys are there. Nothing to type, nothing to remember, no password to lose.
Pick a provider from the built-in list and paste your key. Saferkeys tells you which ones are free and links you directly to where you get each key.
When any tool on your Mac requests a key, you see a prompt — approve it and it has access from now on. Revoke it any time from the Apps tab.
The security story is simple: your keys never go anywhere they don't need to.
The same place Safari saves your passwords. Keys never touch disk as plain text, are inaccessible to other apps, and are locked when your Mac sleeps. (Keychain API, service com.saferkeys)
The app shows nothing until you touch the sensor. No bypass, no password fallback, no "remember me." Your fingerprint is the only way in. (macOS LocalAuthentication)
The background service only listens on 127.0.0.1 — unreachable from outside. No account, no cloud, no company holding a copy. And the source code is open, so you can verify every word of this yourself.
Export an encrypted backup from the Backup tab. Copy the file. Import it on your new machine. Every key lands in your new Keychain — no hunting, no re-pasting, no memory test. The backup is encrypted with your password. There's no recovery option — which is intentional.
Saferkeys takes five minutes to set up. Add your first key, set your routing priority, and every tool on your Mac works from there. Wallet, router, and ledger — all in one.
FREE · OPEN SOURCE · NO ACCOUNT · NO CLOUD
Download Saferkeys — it's freemacOS 13 Ventura or later · Apple Silicon & Intel · Always free