Frequently asked questions

Agent Master Key (AMK) is a macOS app from AM Accelerated LLC for giving AI agents access to supported APIs without putting real provider keys in agent configuration. It stores provider keys in a local AES-256-GCM vault and gives each agent a scoped and revocable amk_live_… key through a broker on 127.0.0.1. It supports Codex, Claude Code, Cursor, Hermes and other MCP clients, with approvals, an audit log and a kill switch. It requires Apple Silicon and macOS 14 or later; every new install starts with a 3-day free trial — no card required. Download AMK or compare the options.

No. Agent Master Key is a macOS app with an encrypted local vault and a local credential broker. It is not a browser extension or a cloud vault. Read the trust and custody model.

No. AMK agent keys are scoped and revocable. Scope limits which connectors and actions an agent may use; revocation stops new requests through AMK using that key. Those properties do not imply automatic expiry. Revoking an agent key does not require rotating the underlying provider keys, provided those provider keys have not themselves been exposed. How AMK access works.

Full access is $10/month or $99/year. Every new install starts with a free 3-day trial — no card required — that includes every product capability: scoped keys, approvals, the kill switch, and the redacted audit trail. See pricing.

No card, no account — the trial is 3 days of full access from first launch. When it ends, the app asks you to choose a plan; nothing is charged automatically. Your vault, connectors, agent keys, and audit trail all live locally on your Mac and stay yours either way.

Connect as many agents as you like — full access has no agent limit. To disconnect one: Advanced → Connected agents, find it, click Disconnect. Your provider accounts and stored keys are untouched, and reconnecting an agent you've already used just works.

Yes — choose $10/month or $99/year on the pricing page, or start with the free 3-day trial from the download page.

No account is required — the trial and the app run locally. People who obtained access before paid plans launched keep their existing rights and can use manage prior access.

A subscription or license is bound to one Mac — reinstall on it freely; everything lives locally, so removal and reinstall are entirely in your hands. See the uninstall guide for what removal does and does not delete.

Billing errors and statutory rights are covered, plus a first-charge refund on request within 7 days (monthly) or 14 days (yearly). See the Refund Policy. Email support@agentmasterkey.com with your Stripe receipt number or your license key; either is enough.

Your provider API keys live in an AES-256-GCM encrypted vault on your own Mac; they are never uploaded to us. A small broker runs locally (127.0.0.1) and uses those keys to fulfill requests your agents are allowed to make. Your agent only ever receives a scoped, revocable amk_live_ key — never your real credential. Read the full model, including what we do and don't protect against, at trust & custody. For the wider threat landscape — including how prompt injection targets agent credentials — see The AMA Hub's guide to prompt injection and AI agent credentials.

The Kill Switch pauses agent execution through the broker. An authenticated operator can turn it off to resume execution; individual keys do not need to be reconnected. You can separately revoke a single scoped key without touching the others.

Saving the switch state is best-effort. Successfully saved state survives a broker restart; unreadable or untrusted saved state starts with the switch enabled. A toggle changes the running state and clears the recovery marker before attempting to save. Write failures are logged without rejecting the toggle, so a cleared recovery warning is not proof that the choice will survive restart.

One-click setup currently covers Claude Code (CLI), Claude Desktop, Cursor, VS Code / GitHub Copilot, Codex CLI, JetBrains AI Assistant, Antigravity (Gemini IDE), and Hermes (Desktop/CLI) — most connect with one click, and a few (like JetBrains) use a short paste-in snippet instead. Any other MCP-compatible agent can use Agent Master Key's standard MCP setup even without a dedicated button. Walkthrough: getting-started guide.

From version 0.0.10 on, Agent Master Key updates itself: choose Check for Updates from the app menu and it installs the new version for you. On 0.0.9 and earlier, there's no in-app updater yet — grab the newest build from the download page and install it the same way as the first time. See the changelog for what's new in each release.

Quit the app and drag Agent Master Key.app from Applications to the Trash — that removes the app itself. Your encrypted vault and local state stay behind at ~/.agent-master-key/ in case you reinstall. Want everything gone, including Keychain items, preferences, and logs? The full step-by-step is on the uninstall page.

Email support@agentmasterkey.com for private help. Found a possible security issue instead? Email security@agentmasterkey.com and do not post it publicly. Setup guidance lives in the getting-started guide, and launch feedback and discussion live on the community page.