GITHUB_TOKEN revealed
By Claude Code, just now.
ANTHROPIC_API_KEY revealed
By you, in the app, 2m ago.
A log of every use
Every reveal is recorded: what was used, when, and whether it was you or Claude Code. Never the value itself.
API Keys,
without the terminal
Claude Keychain stores your API keys in the macOS Keychain. Type them in once, and Claude Code can use them from then on, without the raw value being handed back to it. It lives in your menu bar.
Monthly, yearly, or lifetime · Cancel anytime · Post about it, get the month back
01
Lives in the menu bar
Claude Keychain sits in the menu bar as a small icon.
Click it for a compact view: add a secret, or reveal and copy one you've already saved. Open the full app when you need Connect, Log, or Settings.
Claude Keychain Add a secret
Name Value Save
Import from .env
Stored secrets
Search secrets
GitHub
Updated 26 Sep 2026 · Not yet used by Claude
Docker
Updated 26 Sep 2026 · Not yet used by Claude
Figma
Updated 26 Sep 2026 · Not yet used by Claude
02
The thing you do now
Pasting a key into the terminal works, until you do it for the fifth project this week, or paste a raw token into chat, where it can be seen.
Claude Keychain stores it once. Claude Code finds it itself, and the raw value never comes back to either of you*.
VS
What you should do
Connect Claude Keychain’s MCP server once. Claude Code calls it directly, so the raw token stays out of the terminal and out of chat.
Safer, and less work the next time. The value stays in the macOS Keychain, and Claude only gets the command’s result.
03
Claude Keychain compared with doing it yourself
Add a key once. It stays out of your shell history, out of your repo, and out of Claude’s context.
Ask AI ChatGPT Claude Perplexity AI Mode Grok
Feature 
Doing it yourself Claude Keychain
Doing it yourself Claude Keychain Re-entering it
Doing it yourselfEvery new project, every new terminal
Claude Keychain Once, ever
Managing your keys
Doing it yourselfTerminal only, no list, no way to check
Claude Keychain A menu bar app: add, view, delete
Moving to a new project
Doing it yourselfCopy the key into a new .env file
Claude Keychain Already there
Where the key lives
Doing it yourselfA .env file, or your shell history
Claude Keychain The macOS Keychain, encrypted by macOS
Record of when a key was used
Doing it yourselfNone
Claude Keychain A log entry, every time
Does Claude ever see the raw value*
Doing it yourselfYes, if you paste it into the chat
Claude Keychain No, only a command's output comes back
Risk of it ending up in a commit
Doing it yourselfReal, if the .env is not gitignored
Claude Keychain None, it is never a file
Price
Doing it yourselfFree, if your time is free
Claude Keychain From $2/mo billed yearly
04
Also included
A log of each use, by name only. The clipboard clears itself. Touch ID or your Mac password before a value is shown. Accent colors.
GITHUB_TOKEN ANTHROPIC_KEY DOCKER_TOKEN Clipboard clears itself
Reveal a key and it copies to your clipboard. It clears itself after 20 seconds by default, or however long you set.
400+
Services recognized
20s
Clipboard timer
0
Raw values sent to Claude
By the numbers
400+ services recognized automatically, a 20-second clipboard timer by default, and zero raw values sent to Claude in normal use*.
Reveal GITHUB_TOKEN?
Confirm with Touch ID or your password.
Cancel Reveal
Touch ID before it shows
Revealing a saved value asks for Touch ID or your Mac password first. If neither is set up, it just shows it.
Five accent colors
Pick orange, blue, green, purple or pink. It changes the app icon and the accent throughout, until you change it back.
Claude Code connected
One click, no config file.
Connects to Claude Code in one click
Claude Keychain ships its own MCP server. Connect once, and Claude Code can use a secret without ever seeing its value.
05
What stays on your Mac
Your keys live in the macOS Keychain. There is no account, and Claude Keychain does not send product analytics. It goes online only to check for updates and to check your license. Read the privacy details.
No account
You buy a license key. There is nothing to sign in to.
No analytics
Claude Keychain does not send product analytics.
Two network requests
One checks for updates. One checks your license. That is all.
06
Simple pricing.
$4 a month, $24 a year, or $39 once. Every plan includes every feature and every update.
Most people pick this
- Every feature included
- Move to a new Mac anytime
- 48-hour refund if it is not for you
macOS 15 Sequoia or later · Apple silicon and Intel · 9 MB · Notarized by Apple
Post about Claude Keychain, get the month back. 100% of the $4 monthly plan, back as a rebate. You keep the month.
The download link appears as soon as you pay, and your key arrives by email. Checkout by Lemon Squeezy.
Already bought? Get your download link.
Get the month back
Buy the $4 monthly plan, post about Claude Keychain, and we rebate that month. You keep the month. This is separate from the 48-hour refund.
- 100% of the $4 monthly plan only. Not yearly, and not lifetime.
- Post on your own account: X, Instagram Reels, TikTok, or YouTube Shorts. Name Claude Keychain and show the real UI, with keys masked.
- 2,000 views on TikTok, Reels, or Shorts, or 10,000 impressions on X. One post. Views do not stack.
- One rebate per person per purchase, matched to the checkout email and the payment method.
- Available in countries where the monthly plan is sold (US, UK, EU).
- The first 100 claims, or 30 days, whichever comes first.
- Send the link, a screenshot of the views, and your checkout email to hey@claudekeychain.app.
- No bought views. A person reviews every claim, and that decision is final.
Frequently asked questions
Something else? Email and a person replies.
Ask AI ChatGPT Claude Perplexity AI Mode Grok
The app
How is Claude Keychain different from a .env file?
A .env file is a plain text file that can end up in a commit if you forget to gitignore it, and you have to recreate it in every new project. Claude Keychain stores the key once in the macOS Keychain, and any project can use it from then on. Claude Code never sees the raw value directly*, only a command's output comes back.
Do I still need to know what a .env file is?
No. That's the point. Add the key once in Claude Keychain's menu bar app, and Claude Code can use it from then on without you touching a text file, an export command, or your shell config.
Is it possible for Claude to ever see my key at all?
Not directly, in normal use. Claude Keychain injects your key as an environment variable into the command's process, and any subprocess it spawns inherits it the same way a real terminal session would. Claude only ever receives that command's normal output (stdout/stderr), and any exact copy of the key found in that output gets redacted before it comes back. There's a real limit to that: it's a safety net, not a sandbox. See the full breakdown, including what it doesn't protect against.
Which Macs does it run on?
macOS 15 Sequoia or later, on Apple silicon and Intel.
Buying
How much does it cost?
$4 a month, $24 a year, or $39 once for lifetime access. All three plans include every feature.
Do I pay again for updates?
No. Every update is included on every plan, monthly, yearly, or lifetime. There are no separate paid upgrades.
How many Macs can I use it on?
One Mac at a time. Move it to a new Mac whenever you like, with no account and no email to support.
How does the get-the-month-back offer work?
The offer is 100% of the $4 monthly plan only. Not yearly, and not lifetime. Post on your own account on X, Instagram Reels, TikTok, or YouTube Shorts. The post has to name Claude Keychain and show the real UI, with keys masked. One post needs 2,000 views, or 10,000 impressions on X. You keep the month. It is a rebate, separate from the 48-hour refund. Available in countries where the monthly plan is sold (US, UK, EU). The rules are on the month-back page.
Is there a free trial?
No, but there is a 48-hour refund. If Claude Keychain is not for you, email us and we refund the payment.
How do I get the app after paying?
The download link is on the page you land on after checkout. Your license key arrives by email within a minute. If you lose either, enter your key on the download page to get the link again.
Why is it not on the Mac App Store?
Claude Keychain is not on the Mac App Store. You download it from this site. It is signed with an Apple Developer ID and notarized by Apple, so macOS opens it like any other app.
Privacy and safety
Does it send anything about my Mac anywhere?
Your keys stay in the macOS Keychain. There is no account, and Claude Keychain does not send product analytics. It goes online only to check for updates and to check your license.