Your API keys and environment variables, in one clean screen. A wallet signature unlocks them in your browser. No passwords and no hardware keys.
On your machine: npx signreveal login
Your secrets are encrypted in your browser before they are saved. SignReveal never stores readable secrets: our servers hold only the encrypted copy, so a stolen database shows nothing readable.
Approve one message in your wallet. It is free and sends no transaction.
The signature unlocks your vault on your device. The unlock key is never sent to our servers.
Reveal one value, copy it, or run npx signreveal run -- npm start to load every key into your app.
Approve an AI agent once. The SignReveal tool on your own machine adds the key to each request the agent makes. Run the agent as its own computer user and the key never enters its context, environment or output, and never reaches our servers.
npx signreveal proxy --agent my-agent --run-as agent -- claude
POST api.stripe.com/v1/charges
Authorization: added on your machine by SignReveal
Security choices made now so your secrets stay safe for years, not just today.
Every value is encrypted in your browser with 256-bit keys before it is saved.
Keys sent to your computers and agents are sealed with both X25519 and ML-KEM, the new US government post-quantum standard.
Encrypted vaults stay in private storage. Nobody can copy them from a public chain to crack later.
Every event is signed and chained, and your browser checks the chain on every visit. Posting its fingerprint to Base is next.
Load keys anywhere Node.js runs with one command: npx signreveal run -- your-command. On a server, set one SIGNREVEAL_DEPLOY_KEY: it reads a single environment, expires within a year, and is revoked in one click. One-click sync to Render, Vercel, Fly.io and GitHub Actions is coming.
SignReveal is open now for one wallet. Sharing a vault with teammates is next. Leave your email and we will tell you when it ships.