Your API keys and environment variables, in one clean screen. One wallet signature logs you in and unlocks them. No passwords, no codes, no hardware keys.
Your secrets are scrambled before they leave your browser. We store only the scrambled copy, so we cannot read your keys, and neither can anyone who breaks into our servers.
Approve one message in your wallet. It is free and sends no transaction.
The signature unlocks your vault on your device. The key never reaches our servers.
Reveal one value, copy it, or run signreveal run -- npm start to load every key into your app.
Approve an AI agent once. The SignReveal tool on your own machine attaches the key to each request the agent makes, so the key never enters the agent's context or logs, and never reaches our servers.
POST api.stripe.com/v1/charges
Authorization: added on your machine by SignReveal
Security choices made now so your secrets stay safe for years, not just today.
Every value is encrypted in your browser with 256-bit keys before it is saved.
Team sharing uses ML-KEM, the new US government standard designed to survive quantum computers.
Encrypted vaults stay in private storage with locked, separate backups. Nobody can copy them from a public chain.
A fingerprint of the activity log is posted to Base, so you can check we never changed your history.
Sync keys to Render, Vercel, Fly.io and GitHub Actions from your browser, or load them anywhere with one command.
We are onboarding a small group of developer and protocol teams first. Join the list and we will email you when your spot opens.