The encrypted vault for your API keys and AI agents
Your keys.Your call.
Keys and email credentials locked behind your Mac’s Secure Enclave and handed only to the local agents you approve. With MoltenRock Connect, your agents never see a key at all. Part of a suite with MoltenMail & MoltenView.
- Secure Enclave
- No account
- No cloud
- No telemetry
- Notarized by Apple
- Swiss-built
- OpenClaw
- Hermes
- Claude Code
- Codex
- Cursor
- Claude
- Shopify
- Stripe
- WooCommerce
- GitHub
- Linear
- Notion
- Slack
- Sentry
- Cloudflare
- Airtable
- Zendesk
- IMAP mail
How it works
Three steps from plain text to sealed.
Seal your keys
Move API keys and email credentials out of plain-text config files and into an encrypted vault protected by your Mac’s Secure Enclave. Recovery-phrase backup. No account, no cloud.
Choose who gets what
Per-agent, per-key permissions. Grant, block, or revoke any time: OpenClaw can have your OpenAI key without ever seeing your Stripe key.
Agents work. You watch.
Agents get a key only once you have allowed it, over a local connection, and every access lands in the Activity log. Through MoltenRock Connect they never see a key at all.
MoltenRock
One vault for every API key - your agents get only the keys you allow
MoltenRock stores API keys and email credentials in an encrypted vault protected by your Mac’s Secure Enclave, and serves them to the local AI agents and developer tools you already use - OpenClaw, Hermes, MoltenMail and MoltenRock Connect - so secrets never sit in plain-text config files. You decide which agent may use which key, and see every access in the activity log.
Free to use · Pro from $9.99/mo for unlimited keys and mailboxes and the MoltenRock Connect vault · requires a Mac with Secure Enclave (Apple Silicon or T2)
What Pro unlocks- Secure-Enclave encrypted vaultHardware-backed keys, recovery-phrase backup, no account, no cloud, no telemetry.
- You control every agentPer-agent, per-key permissions - grant, block, or revoke anytime, with a full activity log.
- Made for local AI agentsSecrets resolver for OpenClaw and Hermes, a read-only email bridge with per-agent tokens, and the vault behind MoltenRock Connect - all over local connections, never the cloud.
MoltenRock Connect
Your business tools for your AI agent: it reads, it proposes, you approve
Connect Shopify, WooCommerce, Stripe, AfterShip, ShipStation and 26 more platforms so your local AI agent can look up orders, payments, tracking, tickets and metrics - on your Mac, with every request audited. Reads are free for the agent; changes go only through the Human Queue, now live for Stripe: the agent proposes a refund or an invoice, you approve it with Touch ID, and Connect sends it. Customer names and addresses are tokenised by default. Pair it with MoltenRock and the keys never leave the vault.
The Human Queue for Stripe is liveFree for a couple of connectors · Lifetime unlock for unlimited connectors, one payment · vault storage and approving Human Queue proposals need MoltenRock Pro
- Customer
- Jane Doe
- Ship to
- 12 Rue de Rivoli, Paris
- Order
- #4411 · 2 items
- Status
- Shipped · tracking live
Illustration. A real name is disclosed only for drafting, and every disclosure is logged.
- Nothing changes without youYour agent reads freely. To change anything it files a proposal, with why and what it read; you approve it with Touch ID and Connect sends it. The agent never holds a write key. Live for Stripe; every other platform stays read-only.
- Private by defaultCustomer PII is tokenised before your agent sees it; a real name is disclosed only for drafting, and every disclosure is logged. A kill switch refuses every request instantly.
- Made for AI agentsClaude Code, Claude Desktop and Cursor over MCP, added once; Codex, OpenClaw and any agent that can run a command on your Mac over a local socket, with a short note pasted into the agent. Keys in your Mac’s Keychain - or in MoltenRock’s Secure-Enclave vault.
Read-only keys, except Stripe for the Human Queue: a secret or restricted key, and you decide what it allows. Each platform card in the app says which key type it expects and where to create it.
- Shopify
- WooCommerce
- Stripe
- AfterShip
- ShipStation
- Sentry
- Vercel
- Resend
- Airtable
- PostHog
- Slack
- Linear
- Plausible
- Notion
- ChartMogul
- GitLab
- Datadog
- Pipedrive
- GitHub
- Jira
- Confluence
- Discord
- Intercom
- Cloudflare
- Mixpanel
- Twilio
- SendGrid
- Mailchimp
- Asana
- Zendesk
- ClickUp
The Human Queue
Your agents propose. You decide.
AI agents are starting to act for you: refunding, invoicing, cancelling, paying. The Human Queue is the lane where their changes wait until you approve them. It’s live now in MoltenRock Connect, starting with Stripe: your agent proposes a refund, a dispute response or an invoice, you approve it with Touch ID, and Connect sends it. Cloudflare is next.
- Agents can ask, not approveAn agent can put a proposal in the queue, with why and what it read. It can’t approve its own proposal.
- Credentials never crossYour keys stay on your Mac, in the Keychain or the MoltenRock vault. Connect sends what you approve; the agent never holds a write key.
- Everything is written downEvery proposal and every decision is logged on your Mac.
Approving proposals needs MoltenRock Pro. Everything else in Connect stays read-only.
Hear when the Human Queue adds a platform
Cloudflare is next. We’ll email you when it lands, plus the odd update about the Human Queue. Unsubscribe anytime. Privacy policy
Live today: the Human Queue for Stripe, in MoltenRock Connect. Download free →
- Your agent wants toWaiting for youRefund a charge · 49.00 USD · customer ⟨cust_7F3A⟩
- Your agent wants toDenied · with a noteVoid invoice #4411 · 2,400.00 USD
- Your agent wants toApproved · sent by ConnectPause a subscription’s payments · until 1 November
Illustration. Approve with Touch ID; Connect then sends the change itself.
MoltenMail
Secure email for you and your AI - read & draft only
Let your AI Agent read, search, and draft email on your Mac - every reply it writes lands in your mailbox’s own Drafts folder, ready to review, edit, and send from any mail app with ease. Your Drafts folder becomes your approval queue: the AI prepares, you decide. Password in the Keychain; local connection only; never send, never delete.
- Read & draft only - by designIt can never send, never delete, move, or mark your email.
- Your password never leavesIMAP credentials stay in the macOS Keychain. Agents get data only.
- Made for AI agentsOpenClaw, Hermes, Claude, Cursor, Codex, and more - via local connection, no cloud.
Free to use · optional one-time $9.99 Pro for unlimited server drafts · Agent setup guide →
MoltenRock Pro includes MoltenMail Pro when you buy direct: it arrives in your purchase email, alongside unlimited mailboxes inside MoltenRock. See Pro →
MoltenView
A canvas for your AI assistant to visualize views
MoltenView provides a secure, local interface where your AI agents can render visual content, create interactive displays, and present information, all without ever leaving your Mac.
- Secure CanvasIsolated rendering environment for AI-generated views
- Local FirstEverything runs on your machine. No data leaves your Mac.
- OpenClaw ReadySeamlessly integrates with OpenClaw and compatible agents
Direct download: works with Claude Code’s built-in helper · update by downloading again
Example data.
MoltenRock AI
A privacy-first model that works alongside your agents
MoltenRock AI is being built for MoltenRock’s own systems, as an internal checker. It runs sandboxed next to the agents you already use, and only ever on local models or end-to-end encrypted cloud models.
- SandboxedWorks alongside the agents you already use, inside its own sandbox.
- Local or end-to-end encryptedRuns on local models, or on end-to-end encrypted cloud models. Nothing else.
- An internal checkerBuilt for MoltenRock’s own systems, to check the work happening inside them.
Hear when it’s ready
MoltenRock release news, including MoltenRock AI. Unsubscribe anytime. Privacy
- Local model, on your Mac
- End-to-end encrypted cloud model
- Any other cloud model
Who it’s for
Your kind of work. Your keys.
- Online storesShopify, WooCommerce and Stripe: agents answer order questions and propose refunds you approve.See how
- DevelopersAPI keys out of .env and config files; Claude Code, Cursor, Codex, OpenClaw and Hermes, scoped.See how
- Solo founders & startupsNo IT team needed: one vault on your Mac, every agent scoped, nothing changes without you.See how
- Law, accounting & agenciesClient email and keys stay on your Macs; agents read and draft, and never send on their own.See how
- Teams & enterpriseRolling MoltenRock out across a team, and the team Human Queue on our roadmap. Talk to us.See how
MoltenRock Pro
Start free. Go unlimited when your agents do.
One subscription lifts every limit in MoltenRock, unpauses every MoltenRock Connect platform and, when you buy direct, includes MoltenMail Pro. Your privacy model is unchanged.
- Unlimited keys, mailboxes and agents
- Full, unblurred Activity log
- Every MoltenRock Connect platform
- MoltenMail Pro included (buy direct)
- Up to 5 Macs per licence
Fluid Security
Built like a vault. Flows like magma.
Like molten metal, our security layer flows around your AI agents, filtering threats while letting legitimate interactions through.
Privacy by Design
All local, no data collection, no cloud. Your AI assistant, your machine, your control, with complete privacy if you run your own local AI LLM Model.
Controlled Access
Intelligent filtering ensures your AI agents can only access what they need. Security that adapts to your workflow.
Native Performance
Built specifically for macOS with native performance and security. No overhead, no lag, just seamless integration with your local AI agents.
Secure Enclave
Vault keys are protected by the dedicated security chip in Apple Silicon and T2 Macs, with a recovery phrase you keep.
Every access recorded
Which agent used which key, and when. Grant, block, or revoke from the same screen.
Swiss-built
Crafted by Goldcote Ltd Software in Switzerland. Notarized by Apple. No account, no telemetry.
Be first to every release, and to the Human Queue.
Release notes, early access to what’s next, and now and then one question about how MoltenRock works for you. We read every reply.
Swiss Quality. Local Security.
Your keys belong in a vault. Not in a config file.
Crafted by Goldcote Ltd Software in Switzerland. Built for the era of local AI agents.