The Mac API key manager built for AI agents

Your OpenAI, Anthropic, Stripe and Telegram keys, in one encrypted vault on your Mac. Agents get what you grant; nothing else can read them.

Download MoltenRock · Free See it in action

The short answer

MoltenRock is a native Mac API key manager designed for AI agents. You paste each key once; it is sealed in the Secure Enclave and encrypted at rest. Paired agents (OpenClaw and Hermes) receive only the keys you grant, every release is logged, and you can revoke access in one switch. Tools like Claude Code and Cursor reach your business platforms through MoltenRock Connect without holding keys.

The problem

Keys live in the worst places

.env and config files
Plain text on disk, readable by any process and any agent working in that folder.
Shell history and profiles
Exported in .zshrc, pasted into terminals, synced with dotfiles.
Every agent sees every key
No way to give one agent the Telegram token and another only the model key.

How MoltenRock handles it

One vault, per-agent release

Secure Enclave vault
Keys are sealed by your Mac’s hardware and encrypted at rest. Paste once; you never see them again.
Per-agent grants
Choose which agent may resolve which key. Block an agent in one switch.
Logged releases
Every unlock, release and denial is recorded in the Activity log.
Fully reversible
Leave anytime: your keys write back to where they came from.

How it works

Move your keys in

01
Download MoltenRock
Free for Mac, or from the Mac App Store.
02
Paste each key once
It is sealed in the vault, and you can delete the plain-text copy.
03
Grant
Pick which agent gets which key. Everything else stays sealed.

Straight answer

Who gets keys, and who doesn’t

Stays on your Mac

Every key, sealed in the vault
Grants and the log of every release
Keys for Claude Code, Claude Desktop and Cursor: they use Connect instead and never receive one

Leaves your Mac

A key, to OpenClaw or Hermes, when you granted it
The calls those agents make with it
Nothing to a MoltenRock server; there is none

Questions

What people ask first

Which apps can receive keys?

Today MoltenRock releases keys to OpenClaw and Hermes. Support for more apps’ keys is coming. Claude Code, Claude Desktop and Cursor work through MoltenRock Connect over MCP instead.

Is it a replacement for my password manager?

No. Keep your password manager for logins. MoltenRock is for the keys your agents use.

What does it cost?

Free with 3 keys, 1 mailbox and 1 agent. Pro is $9.99 a month or $99.99 a year, unlimited, on up to five Macs.

Is it on the Mac App Store?

Yes, and as a direct download.

Get your keys out of plain text.

Free for Mac. No account, no cloud, no telemetry.