{"repo":"fujitoid/key-amnesia","free":true,"listed":false,"github":"https://github.com/fujitoid/key-amnesia","clone":"git clone https://github.com/fujitoid/key-amnesia.git","description":"Let your AI agent use your passwords and API keys - without ever letting it see them","language":"Python","stars":47,"topics":["ai-agents","claude-code","cli","credential-management","cursor","devsecops","linux","llm-security","python","secrets-management"],"license":"Apache-2.0","category":"ai-agents","readme_excerpt":"key-amnesia Let your AI agent use your passwords and API keys — without ever letting it see them. The problem is .env .env was designed for a threat model whose adversary was git . One line in .gitignore and you were done. That model is obsolete: the adversary is now the agent sitting in your project . Anything the agent can read — .env , shell history, MCP configs, a credentials JSON left in the tree — is a LEAK (Locally Exposed Agent Key). Pasting a key into chat is worse; it lives in the conversation forever. Your choices used to be ugly: paste the key, leave it in plaintext where the agent can read it, or do that part yourself. key-amnesia is the fourth option. Secrets live in an encrypted vault. The agent triggers commands that use them — values are injected into the child process environment, out of the agent's sight. If a command prints a secret, key-amnesia censors it before the agent sees the output. The master password can only ever be typed by you, at a real keyboard: when an agent needs approval, a separate console window pops up — one the agent cannot read or type into. Auth routing requires both stdin and stdout to look like a TTY before prompting inline; set KEY AMNESIA NONINTERACTIVE=1 in agent harnesses to always force that window. The agent gets amnesia. That's the whole point. Docs: github.com/fujitoid/key-amnesia/wiki — or run ka docs (prints the URL; opens a browser unless you pass --print ). How it works, in 30 seconds ka scan reports names, paths, and c","default_branch":null,"files":null,"tree":[],"storefront":"/r/fujitoid","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/fujitoid/key-amnesia/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}