Explore the repo 01
Keys stay where they belong
Private keys remain inside macOS Secure Enclave-backed infrastructure. Your agent never sees the secret.
Open source · Early alpha
Give agents
permission,
not your keys.
AgentPass is a policy broker for coding-agent operations. It keeps secrets inside the security boundary and gives agents exactly the authority they need — no more.
⌘ Built for macOS + Git SSH signing
› agentpass check
✓brokerrunning
✓key storagesecure enclave
✓sessionrequired · 15m
› agentpass agent scope build-bot
◈build-botACTIVE
operationgit.commit.signrepositoryacme / apibranchrelease/*remotegithub.com
THE AGENTPASS PROMISE
Unattended work
should still have boundaries.
Password managers were designed for human approval. Coding agents need a different model: narrowly scoped authority, enforced by a broker that can say no.
02
Every action has a scope
Allow only the operation, repository, branch, and remote an agent needs. Nothing more.
03
Fail closed. Stay auditable.
Short-lived sessions, signed requests, and a tamper-evident audit chain make unattended work accountable.
A SMALLER TRUSTED SURFACE
One request.
Three checks.
AgentPass sits between your agent and the operation. It validates context, checks policy, then delegates signing — or refuses.
Read the security model ↗01
Agent asks
A signed request arrives through the local broker.
02
Policy decides
Repository, branch, remote, session, and scope are checked.
03
Broker signs
The key signs inside the security boundary. The payload is audited.
Built in public
Make your agents
safe by default.
AgentPass is MIT-licensed and evolving in the open.
Get started on GitHub ↗