Solutions
Private, safe AI agents for your business, on your Mac
Every page here answers one question companies ask before they let an AI agent near their keys, inbox or store. Straight answers, including what MoltenRock does not do.
For companies
For companies
- Private AI agents for your business, on your MacRun AI agents for your company on a Mac without handing them your keys, inbox or store. Secrets in the Secure Enclave, approvals before changes, a full log.Keep reading
- AI agent security for small businesses, on a MacSecure AI agents on a Mac: keys agents can’t read, per-agent permissions, Touch ID approval before changes and an audit log. A practical setup for small teams.Keep reading
- Approve every AI agent action before it happensHuman-in-the-loop approval for AI agents: the agent proposes a refund or invoice, you approve it with Touch ID, then Connect sends it. Live for Stripe.Keep reading
- See everything your AI agents accessAn audit log for AI agents on your Mac: every grant, unlock, denial and proposal recorded locally, per agent. Know what your agents accessed and when.Keep reading
- Give AI agents your business tools, not your API keysLet AI agents use Stripe, Shopify, WooCommerce and 28 more platforms without ever holding an API key. Keys stay in MoltenRock Connect on your Mac; agents get answers.Keep reading
Stripe, with your approval
Stripe, with your approval
- Let Claude Code issue Stripe refunds, safelyLet Claude Code, Claude Desktop or Cursor refund Stripe payments without a write key: the agent proposes the refund, you approve it with Touch ID, then MoltenRock Connect sends it.Keep reading
- Let AI answer your Stripe disputes, with your approvalLet an AI agent gather order, shipping and tracking proof and draft your Stripe dispute evidence. You review it and approve with Touch ID before anything goes to the bank.Keep reading
- Let AI work through your Stripe fraud reviewsLet an AI agent check the payments Stripe flagged for review and propose approving them or reporting fraud. You decide with Touch ID; the agent never holds the key.Keep reading
- Let AI prepare and send your Stripe invoicesLet an AI agent draft Stripe invoices, add lines, finalize and email them, or issue credit notes. Every step waits for your Touch ID; the agent never holds the key.Keep reading
- Let AI handle your Stripe subscription requestsLet an AI agent handle subscription requests in Stripe: cancel at period end, pause or resume payments, change quantity, extend a trial, apply a coupon. You approve each with Touch ID.Keep reading
- Let AI create your Stripe coupons and payment linksLet an AI agent create Stripe coupons, promotion codes and payment links, or turn them off, as proposals you approve with Touch ID. Discounts capped; the agent never holds the key.Keep reading
Cloudflare
Cloudflare
- Let Claude read your Cloudflare analytics, DNS and settingsAsk Claude, Cursor or Claude Code about your Cloudflare zones: traffic, errors, DNS records, SSL settings, Pages and Workers. Read-only, through MoltenRock Connect on your Mac.Keep reading
- Let AI fix your Cloudflare DNS, with your approvalComing soon: your AI agent proposes adding, changing or removing Cloudflare DNS records, and you approve each change with Touch ID. Reading DNS works today.Keep reading
- Let AI tune Cloudflare security settings and purge the cacheComing soon: your AI agent proposes Cloudflare SSL/HTTPS, HSTS, bot protection, security header and DNSSEC changes or a cache purge; you approve each with Touch ID.Keep reading
- Let AI deploy and roll back your Cloudflare Pages sitesComing soon: your AI agent proposes creating a Cloudflare Pages site, setting builds, variables and domains, deploying or rolling back; you approve each with Touch ID.Keep reading
- Let AI manage your Cloudflare firewall and rate limitsComing soon: your AI agent proposes Cloudflare IP rules, firewall and rate-limit rules, redirects and header or cache rules; you approve each with Touch ID.Keep reading
OpenClaw & Hermes
OpenClaw & Hermes
- Get your API keys out of openclaw.jsonMove OpenClaw’s API keys out of openclaw.json into MoltenRock’s Secure Enclave vault. OpenClaw resolves them by name; the plaintext leaves your config for good.Keep reading
- Give OpenClaw your OpenAI key, not your Stripe keyGrant OpenClaw exactly the API keys it needs and nothing else. MoltenRock releases keys per agent and per key, logs every release and revokes with one click.Keep reading
- Keep API keys out of Hermes’s configHermes 0.21.1+ can fetch API keys from MoltenRock by name over a private pairing token. Keys never sit in Hermes’s config; it fetches only what you list, and every fetch is logged.Keep reading
- Let OpenClaw or Hermes read your inbox and draft repliesConnect OpenClaw or Hermes to your email through MoltenMail: they can list folders, read and draft, but can’t send, delete, move or mark mail. Your password stays in the Keychain.Keep reading
- Let Claude draft your email replies, without send accessLet Claude Desktop or Claude Code read your inbox and write replies into your Drafts folder through MoltenMail. It can’t send, delete or move anything; you send from your own mail app.Keep reading
- Private email AI with a local modelLet a local AI model in LM Studio read your email and draft replies through MoltenMail. No cloud AI sees your messages; the agent can’t send, delete or move mail.Keep reading
For developers
For developers
- The Mac API key manager built for AI agentsA Mac API key manager for the agent era: keys sealed in the Secure Enclave, released per agent to OpenClaw and Hermes, logged, and never in a .env file.Keep reading
- MCP credential storage, without keys in config filesStop putting API keys in MCP server config files. MoltenRock Connect is a local MCP server on your Mac that holds the credentials and gives agents answers, not keys.Keep reading
- The safe way to let an AI agent read your emailLet AI read your email safely: read-only IMAP, drafts but never sends, attachments held back, password in the Keychain. MoltenMail for Mac.Keep reading
Your business tools
Your business tools
- Let your AI agent read your Shopify store, safelyGive Claude, Cursor or your own agent read access to Shopify orders, customers, products, stock, refunds and tracking, without handing over your Admin API token.Keep reading
- Safe, read-only WooCommerce access for your AI agentLet an AI agent read WooCommerce orders, customers, products, stock, refunds and tracking without holding your REST API keys. Keys stay in MoltenRock Connect on your Mac.Keep reading
- ShipStation answers for your AI agent, keys keptLet your AI agent answer “where’s my order?” from ShipStation orders and tracking. Your API key and secret stay in MoltenRock Connect on your Mac.Keep reading
- Delivery status for your AI agent, from AfterShipLet your AI agent check AfterShip tracking to answer delivery questions. The API key stays in MoltenRock Connect on your Mac; the agent gets the status.Keep reading
Comparisons
Comparisons
- MoltenRock vs .env files for AI agents.env files keep API keys in plain text any agent in the folder can read. Compare with a Secure Enclave vault that releases keys per agent and logs every release.Keep reading
- MoltenRock vs a password manager for AI agentsPassword managers are built for people and teams; AI agents need per-agent grants, approvals and a log. How MoltenRock compares, and why you may want both.Keep reading
- A local Mac vault vs a cloud secrets manager, for AI agentsCloud secrets managers serve servers and CI. AI agents on a Mac need a local vault with per-agent grants and approvals. How MoltenRock compares.Keep reading
Private, safe AI agents for your business, on your Mac
Free for Mac. No account, no cloud, no telemetry.