🔑 KeyVault Pro
Secure API Key Management for Developers
A comprehensive browser extension, CLI tool, and MCP server for managing API keys with military-grade encryption, intelligent auto-fill, and AI agent integration.
Features • Installation • Usage • MCP Integration • Contributing
🌟 Why KeyVault Pro?
Managing API keys is a pain. You need them everywhere, but they're sensitive and easy to expose. KeyVault Pro solves this with:
- 🔐 Military-grade encryption (AES-256-GCM)
- 🎯 Intelligent auto-fill on any website
- 🤖 AI agent integration via MCP server
- 📊 Usage tracking and analytics
- 🔍 Smart organization with tags and environments
- 💻 CLI tool for terminal workflows
- 🌐 Multi-browser support (Chrome, Edge, Brave, Firefox)
📦 What's Included
1. Browser Extension
Full-featured extension for Chrome, Edge, Brave, and Firefox with:
- Visual auto-fill on detected API key fields
- Encrypted local storage
- Beautiful dark/light themes
- Usage analytics and expiration tracking
2. CLI Tool
Command-line interface for terminal-based workflows:
keyvault add "OpenAI" "sk-..." "production"
keyvault list
keyvault copy openai
3. MCP Server
Model Context Protocol server for AI coding agents:
- Enables AI assistants to securely access your API keys
- No more pasting keys into prompts
- Works with Claude, GPT-4, and other MCP-compatible agents
4. Advanced Libraries
- Breach Detection: Check keys against known patterns
- Rate Limit Monitoring: Track API usage and costs
- Import/Export: Compatible with 1Password, LastPass, Bitwarden
- Key Validation: Format checking for major APIs
✨ Features
Security
- ✅ AES-256-GCM encryption for all keys
- ✅ PBKDF2 key derivation (100,000 iterations)
- ✅ Master password protection (no recovery by design)
- ✅ Auto-lock after configurable idle time
- ✅ Clipboard auto-clear
- ✅ Complete audit logging
- ✅ Breach detection and security scoring
Auto-Fill
- ✅ Smart field detection using multiple heuristics
- ✅ Visual 🔑 icon on detected fields
- ✅ Keyboard shortcuts (
Ctrl+Shift+K) - ✅ Right-click context menu
- ✅ Domain-based suggestions
- ✅ Beautiful modal key selector
Organization
- ✅ Categorize by service, environment, and tags
- ✅ Color-coded keys
- ✅ Favorites system
- ✅ Fuzzy search
- ✅ Filter by environment
- ✅ Notes and documentation per key
Analytics
- ✅ Usage tracking per key
- ✅ Domain tracking
- ✅ Last used timestamps
- ✅ Expiration alerts
- ✅ Rate limit monitoring
- ✅ Cost estimation (for major APIs)
Integration
- ✅ Import from 1Password, LastPass, Bitwarden
- ✅ Export to CSV, JSON, .env files
- ✅ MCP server for AI agents
- ✅ CLI for terminal workflows
- ✅ Browser extension for visual management
🚀 Quick Start
Browser Extension
- Download the latest release or clone this repo
- Open
chrome://extensions/(or your browser's extension page) - Enable Developer mode
- Load unpacked and select the
api-key-manager-extensionfolder - Click the KeyVault icon and create your master password
- Add your first API key!
CLI Tool
cd cli
npm install -g .
# Initialize vault
keyvault init
# Add a key
keyvault add "OpenAI" "sk-..." "development" "ai,gpt"
# List keys
keyvault list
# Get help
keyvault help
MCP Server (for AI Agents)
cd mcp-server
npm install
# Configure in your AI assistant (e.g., Claude Desktop)
# Add to claude_desktop_config.json:
{
"mcpServers": {
"keyvault": {
"command": "node",
"args": ["/path/to/mcp-server/index.js"]
}
}
}
📖 Usage Examples
Browser Extension
Auto-fill on any website:
- Navigate to a site with an API key field
- Look for the 🔑 icon
- Click it and select your key
- Done!
Or use keyboard shortcut:
- Focus the field
- Press
Ctrl+Shift+K(orCmd+Shift+Kon Mac) - Select your key
CLI Tool
# Add keys
keyvault add "Stripe" "sk_test_..." "testing" "payment"
keyvault add "AWS" "AKIA..." "production" "cloud,aws"
# List all keys
keyvault list
# List production keys only
keyvault list production
# Search for keys
keyvault search stripe
# Copy key to clipboard
keyvault copy stripe
# Export vault
keyvault export backup.json
# Import keys
keyvault import backup.json
MCP Server (AI Integration)
In your AI conversation:
User: "Create a Python script that uses OpenAI's API"
AI: "I'll get your OpenAI API key from KeyVault..."
[AI calls get_api_key tool]
AI: "Here's your script with the key configured:
import openai
openai.api_key = "sk-proj-..." # Retrieved from KeyVault
# Your code here...
The AI can:
- List available keys
- Search for specific keys
- Retrieve keys by service name
- Check key information
- Respect environment separation (dev/prod)
🎯 Use Cases
For Developers
- Store all your API keys in one secure place
- Quick access during development
- Auto-fill on documentation sites
- Track which keys you're using where
For DevOps
- Manage cloud provider credentials
- Separate prod/dev/staging keys
- Track key usage and expiration
- Export keys for team sharing
For AI-Powered Development
- Let AI access keys without exposing them
- No more pasting keys into prompts
- Automatic environment separation
- Usage tracking for AI-accessed keys
For Teams
- Consistent key management
- Audit trail of access
- Encrypted vault sharing
- Environment-based organization
🔐 Security
What We Do
- ✅ AES-256-GCM encryption at rest
- ✅ PBKDF2 with 100,000 iterations
- ✅ Constant-time password comparison
- ✅ No external API calls
- ✅ All processing happens locally
- ✅ No telemetry or tracking
- ✅ Open-source for transparency
What You Should Do
- ✅ Use a strong, unique master password
- ✅ Enable auto-lock (15-30 minutes)
- ✅ Export vault regularly for backup
- ✅ Rotate keys periodically
- ✅ Use different keys per environment
- ✅ Review audit logs
What We Don't Do
- ❌ Store your master password
- ❌ Send data to external servers
- ❌ Track your usage
- ❌ Access your keys without permission
- ❌ Provide password recovery (by design)
📊 Browser Compatibility
| Browser | Extension | Status |
|---|---|---|
| Chrome | ✅ | Full support |
| Edge | ✅ | Full support |
| Brave | ✅ | Full support |
| Opera | ✅ | Full support |
| Firefox | ⚠️ | Temporary add-on only |
🛠️ Development
Prerequisites
- Node.js 14+ (for CLI)
- Node.js 18+ (for MCP server)
- Modern browser with extension support
Project Structure
keyvault-pro/
├── background/ # Extension background scripts
├── content/ # Content scripts
├── popup/ # Extension popup UI
├── options/ # Settings page
├── lib/ # Shared libraries
│ ├── breach-detector.js
│ ├── rate-limit-monitor.js
│ └── import-export.js
├── cli/ # Command-line tool
├── mcp-server/ # MCP server for AI
├── assets/ # Icons and images
└── docs/ # Documentation
Building
# Package extension
zip -r keyvault-pro.zip . -x "*.git*" "*node_modules*"
# Install CLI globally
cd cli && npm install -g .
# Run MCP server
cd mcp-server && node index.js
📚 Documentation
- Installation Guide - Step-by-step installation
- Quick Start Guide - Get started in 5 minutes
- Feature List - Complete feature documentation
- Architecture - Technical design details
- MCP Server Guide - AI integration
- CLI Documentation - Command-line usage
- Contributing Guide - How to contribute
🗺️ Roadmap
v1.1 (Next Release)
- Firefox Manifest V2 support
- Automated tests
- Bulk operations UI
- Keyboard navigation
- Drag-and-drop organization
v2.0 (Future)
- Browser sync (encrypted)
- Team sharing features
- Biometric unlock
- Mobile companion app
- Key rotation automation
- Advanced breach detection
Community Requests
- Custom field types
- Key templates
- Advanced search syntax
- Key versioning
- Internationalization (i18n)
🤝 Contributing
We welcome contributions! Please see our Contributing Guide for details.
Ways to Contribute
- 🐛 Report bugs
- 💡 Suggest features
- 📝 Improve documentation
- 🔧 Submit pull requests
- ⭐ Star the repository
- 📢 Spread the word
📄 License
MIT License - see LICENSE file for details.
🙏 Acknowledgments
- Built with security and developer experience in mind
- Inspired by the need for better API key management
- Thanks to all contributors and users
📞 Support
- 📖 Documentation
- 🐛 Issue Tracker
- 💬 Discussions
- 📧 Email: support@keyvault.pro (placeholder)
⭐ Star History
If you find KeyVault Pro useful, please consider starring the repository!
Made with ❤️ for developers who value security and productivity