Your agent can’t un-see your secrets.

Let your agent work without holding your keys.

We don’t build agents. We make yours safer and simpler. Connect a service once, every agent can use it, and each sensitive action waits for your fingerprint.

Get Started Try the demo →

30 seconds: the agent works, you sign.

Ever pasted an API key into an agent?

Did you hesitate?

You were right to.

Don’t give your secrets to an agent. It’s not safe.

It’s time your secrets had a better home.

Now they live in your own vault: encrypted, on your machine.

Your agent works like before. It just never touches a key.

Get started →

Setup

Just two steps.

Store your secrets once

Paste an API key or sign in with OAuth. The credential is sealed by your passkey on your device; only your fingerprint opens it.

sk-••••••••••••→sealed by passkey

Set up your agent with one message

Copy one message from your console and paste it to your agent. It wires itself up. Claude Code, Cursor, Codex, all the same.

you

Set up SafeClaw so you can call external APIs with credentials I've stored in it. The CLI is `sc`; its usage guide is the skill at …       

the whole thing, copied from your console

your agent

✓ SafeClaw is ready. From here I'll reach Gmail, GitHub and the rest through it.

There is no step three.

From here, the agent just works.

Anything sensitive pauses for your face: one glance, and it carries on.

Simple and safe.

LIVE · TRY IT

A real approval request: send an email, waiting on Face ID

Try an approval yourself →

And one more thing

It also deletes key-pasting from your life.

Connect once. Every agent, on every machine, has it safely.

Your agents

Claude Code

Codex

Cursor

OpenClaw

Gemini CLI

Hermes

＋ Custom Agents & Scripts

SafeClaw

What they can use

Gmail

Google Calendar

Google Drive

Google Cloud

GitHub

GitLab

Supabase

Railway

crates.io

npm

OpenAI

Anthropic

Gemini

Groq

DeepSeek

＋ Custom APIs

1connection

every agent gets it

Connect Gmail once and Claude Code, Cursor, and Codex all have it. New agents plug in with zero re-pasting.

1key per agent

all an agent ever holds

One SafeClaw key buys use of everything. Real keys never enter its config; nothing secret lives in .env.

1sign-in

zero upkeep after

Tokens renew on their own. If one truly dies, you see which and fix it in one place. No hunting through agents.

Get Started

$10/mo, waived during beta · Pricing →

Security

Proof, not promises

The unlock key exists on no server; plaintext never leaves your device.

Signed grant

An approval is a signature, not just a click.

ActionSend one email POST gmail.googleapis.com/…/send

Bound tothis operation's hash

Valid forone execution, then it expires

✗Alter the operation: signature invalid

✗Replay it: already redeemed

✗Forge one: not without your fingerprint

WebAuthn PRF · AES-GCM-256 · SUDP

The grant is defined by SUDP, an open cryptographic protocol with 7 checkable security properties. Not even our own servers can forge one.

Read the paper →

Prefer watching? The whole mechanism, animated.

Open & Self-Custody

Your keys stay yours, end to end.

The daemon runs on your own machine, and the code is open to audit. Move to a new device, sign in, unlock, and every connection is there: the cloud does the syncing yet sees only ciphertext, guaranteed by cryptography.

View the source

Team & Enterprise

Your team's keys in one vault. Your agents' actions on one ledger.

Whose agent did what, at a glance. Enterprise adds self-hosting and compliance.

Pricing details →

For the engineers: a real agent call looks like this

your agent, calling Gmail

$ sc run -- curl https://gmail.googleapis.com/gmail/v1/users/me/messages \
    -H "Authorization: Bearer __sc__gmail__"

# on a sensitive call, you tap the link, Face ID:

200 { "messages": [ … ] }
# the placeholder is swapped at the exit; the agent never saw the real key

Research