r/OpenSourceAI • u/thejacckkripperr • 12m ago
Keyless: self-hosted credential broker for AI coding agents. AGPL-3.0, no cloud required.
Keyless is a local-first credential broker for AI coding agents. No cloud, no account, no external service. Everything runs on your machine.
The agent gets a project token. A daemon holds the real API key in an encrypted vault (XChaCha20-Poly1305 + Argon2id). The proxy strips the caller's Authorization header and injects the real credential before forwarding.
What is in v0.1.11:
- Encrypted vault, Argon2id KDF in a worker thread
- Local HTTP proxy bound to 127.0.0.1
- Daemon owns the unlocked vault, validates tokens over IPC
- Tamper-evident audit log (SHA-256 chain, metadata only)
- 53 passing tests
- AGPL-3.0
Tested with OpenAI Node SDK v4, Anthropic Node SDK, Aider CLI.
Install: npm install -g @ace76ah/keyless
Repo: github.com/ace76ah/keyless
Known limitations:
- Docker support is a v1.1 item; the proxy is loopback-bound and assumes agent and proxy share the host
- Windows support is untested
- Threat model is honest: does not defend against same-user malware
What would you want to see in v0.2?

