Keep keys and passwords for agents in Keychain

A key pasted into the chat stays in the conversation history and in the model’s context. A key in a project file can leak along with the file. That is why Hedoq stores keys in macOS Keychain.

Step by step

1. Gear, “Servers and keys” block, “Keys and passwords”.
2. Click “Add key”.
3. Fill in “Name” and “Value”, and optionally “Variable” and “Note”.
4. Click “Save”.
5. Tell the agent: “take the such-and-such key from Keys and passwords”. It reads it on its own, without asking for permission.

View or copy

• The value is hidden behind dots. The eye icon, “Show value”, reads it from Keychain only at that moment.
• Leave the section, and anything shown is hidden again.
• “Copy value” puts the key on the clipboard.

Example

You want an automation to pull orders from a delivery service every day.

1. Add the service key with a name such as delivery-api.
2. Tell the automation: “the delivery key is in Keys and passwords under delivery-api”.
3. The agent fetches the key at run time. It will not be in the automation’s files.

What else ends up here

• Keys for the services you connected to the notch.
• Keys for your own models.
• Telegram bot tokens and Telegram app keys.
• The Claude subscription token, if you saved one.

Good to know

• Only the list of names is stored on disk, without values.
• Agents are told not to ask for keys in the chat but to take them from here.
• A key you enter for a service is sent only to that service.
• To remove a key, use “Delete” on its row.

See also: privacy, agent tools.