grantpin
A local secrets vault for AI coding agents. Your agent can use an API key without ever receiving it. Built by Jetmir Mehmetaj, one of the engineers DartLabs works with.
- Platform
- macOS 14 and later
- Stack
- Go, Swift, MCP
- License
- Open source, Apache 2.0
- Live at
- grantpin.dev
The problem
AI coding agents need API keys to deploy, test and query databases. When those keys sit in a config file or the agent's environment, they can end up in the chat history or the vendor's logs, or be pulled out through prompt injection.
What was built
-
An encrypted local vault
API keys and tokens stay on your Mac, with no cloud sync, no account and no analytics.
-
Approval with Touch ID
A dialog shows the exact command and the secrets it would get, and you confirm it yourself.
-
Scoped grants
Allow one run, a limited time, or a narrow standing grant tied to a project, secrets and a command.
-
Redacted output and an audit trail
The agent gets the result with secret values replaced, and every release is recorded.
-
Works with your agent
Connects through MCP or the command line, with a dedicated flow for Claude Code.
Key decisions
Local by design
Secrets stay on your Mac, with no cloud service or account to trust.
A person at the boundary
The real protection is a human approving the exact command when a secret is released.
Honest about limits
grantpin is not a sandbox, and its published security model says clearly what it does not protect against.
Where it is today
Version 0.2 is early software for macOS, with a working command-line tool, background service and menu-bar app.
Read the documentation