- 运行状态
- 在线
- 30 天在线率 100%
- 最近代码更新
- 11月1日
- 活跃仓库
- 最新版本
- 无
- 贡献者
- 1 人
- 复刻 0
- 许可证
- 尚未识别 · 请检查原文
- nomorevibe 收录
- 11月10日
- 仓库创建于 2026年10月
语言构成
- Swift 83.1%
- HTML 7.8%
- Python 4.9%
- CSS 等 4.2%
更新0 条更新
全部尚未检测到更新。GitHub 发布版本后会显示在这里。
安全 分类的热门项目
按最近已完成的 8 小时观测回合间的 GitHub 星标增量排序
尚未检测到更新。GitHub 发布版本后会显示在这里。
按最近已完成的 8 小时观测回合间的 GitHub 星标增量排序
个人 GitHub 账号下公开仓库的所有者可以登录并验证所有权，自行管理介绍，无需管理员批准。
登录并生成验证文件，在 30 分钟内将其提交到此仓库的默认分支。其他分支或分叉仓库中的文件无效。然后在下方检查文件，即可无需管理员批准直接管理项目。请保留文件以维持管理权限。
如需登录，将前往登录页面。登录后请回到此处，再次点击所选的验证按钮。
在项目文件夹中运行 /nomorevibe verify，即可验证所有权并自行管理介绍。
一分钟完成验证Your coding agents use your keys. They don't get to read them. Mac app + CLI for API keys, source-available (PolyForm Strict).
翻译准备中
正在加载完整 README。
查看完整 README ↗Your coding agents use your keys. They don't get to read them.
Secretariat is a native Mac app with a command line tool. API keys live in your iCloud keychain; Claude Code, Codex, OpenCode and other agents start your tools through secretariat run, so the program gets the values and the agent sees [masked]. It also captures keys from the clipboard or a screenshot, guards commits and agent commands, hands MCP tokens to Claude Code without plain text, logs who used which key, and backs up everything sealed to a recovery key only you hold.
Website, download and price: https://secretariat.moinsen.dev · What it protects and what it doesn't: threat model
So you can check what a tool that holds your keys actually does, instead of taking our word for it.
Sources/SecretariatCore (vault, keychain, CLI, masking, guard, history, backup) and Sources/Secretariat (the app).Tests/SecretariatCoreTests. Run them with xcrun swift test (Xcode's toolchain; a swift.org toolchain on the PATH lacks the macOS frameworks).PLAN.md lists requirements and acceptance criteria, TRACKER.md the evidence per task. The evidence reports (docs/t0xx-evidence.md) say what was run and observed, including what was not tested. New features are reviewed by a separate reviewer agent with a fresh context before release; its findings and our fixes are in docs/review-*.md. These are our own checks, not an outside audit.docs/release-*.md record build, notarization and distribution for each version.Source-available under the PolyForm Strict License 1.0.0: you may read and audit the code and use it for noncommercial purposes. You may not distribute it or make modified versions. Commercial use needs a Secretariat license, which also gets you the signed, notarized build and all 1.x updates.
Building from source as-is will not get you a working app: keychain access, iCloud sync and the CLI inside the bundle depend on the developer's signing identity and provisioning profile.
Ulrich Diedrichsen, Hamburg · [email protected] · https://www.moinsen.dev
Found a security problem? Please write to [email protected] before opening a public issue.