SignReveal
Join the waitlist
Secrets for developers and AI agents

Sign once. Every key revealed.

Your API keys and environment variables, in one clean screen. One wallet signature logs you in and unlocks them. No passwords, no codes, no hardware keys.

On your machine: npx signreveal login

billing-api / production Locked
Example data. Try it.

A wallet signature is the whole login

Your secrets are scrambled before they leave your browser. We store only the scrambled copy, so we cannot read your keys, and neither can anyone who breaks into our servers.

Sign

Approve one message in your wallet. It is free and sends no transaction.

Unlock in your browser

The signature unlocks your vault on your device. The key never reaches our servers.

Reveal or inject

Reveal one value, copy it, or run npx signreveal run -- npm start to load every key into your app.

Agents use your keys without ever seeing them

Approve an AI agent once. The SignReveal tool on your own machine adds the key to each request the agent makes. Run the agent as its own computer user and the key never enters its context, environment or output, and never reaches our servers.

  • Pick which keys and which environment
  • Access lasts 24 hours by default
  • Revoke any agent in one click
  • Every call is counted and every key fetch is logged
Connect agent8 words match
AgentClaude Code on MacBook
KeysSTRIPE_SECRET_KEY, DATABASE_URL
Environmentstaging
Expires24 hours
Key visible to agentNever
npx signreveal proxy --agent my-agent --run-as agent -- claude POST api.stripe.com/v1/charges Authorization: added on your machine by SignReveal

Built for the long haul

Security choices made now so your secrets stay safe for years, not just today.

End-to-end encrypted

We hold only scrambled data

Every value is encrypted in your browser with 256-bit keys before it is saved.

Quantum-ready

Post-quantum key sharing

Keys sent to your computers and agents are sealed with ML-KEM, the new US government standard designed to survive quantum computers.

Private storage

Nothing secret on a blockchain

Encrypted vaults stay in private storage. Nobody can copy them from a public chain to crack later.

Verifiable

Tamper-evident activity log

Every event is signed and chained, and your browser checks the chain on every visit. Posting its fingerprint to Base is next.

Works where you deploy

Load keys anywhere Node.js runs with one command: npx signreveal run -- your-command. One-click sync to Render, Vercel, Fly.io and GitHub Actions is coming.

Get early access

We are onboarding a small group of developer and protocol teams first. Join the list and we will email you when your spot opens.

One email when your spot opens. No spam.