Delete Your .env File.

fidelius is a Mac app that stores your API keys in the macOS Keychain, grouped by project. Your AI agents use them through accio, and the values go straight to the command.

Download free  Buy Pro for $24
brew install --cask nphardorworse/tap/fidelius

macOS 15 or later

The fidelius window: project myapp is selected and STRIPE_KEY is open, with its value hidden.The fidelius window: project myapp is selected and STRIPE_KEY is open, with its value hidden.
agent › accio myapp npm test
✓ 24 passed
agent › accio myapp printenv STRIPE_KEY
<concealed by fidelius: STRIPE_KEY>

Your Agent Can Read Your .env.

Coding agents read files to do their job. A .env file is one more file, and whatever it reads can end up in a transcript.

agent › cat .env
STRIPE_KEY=sk_live_51Hx…
OPENAI_KEY=sk-proj-Tq…
DATABASE_URL=postgres://admin:…

Today

agent › accio myapp npm test
✓ 24 passed
agent › accio list myapp
STRIPE_KEY  OPENAI_KEY  DATABASE_URL

With fidelius: names for the agent, values for the command

Set Up Once.
Use It Everywhere.

Run Anything with Your Keys

Put accio and a project name in front of any command. The command gets the keys as environment variables.

$ accio myapp npm run dev
> ready on localhost:3000

$ accio myapp --require STRIPE_KEY,DATABASE_URL npm test
✓ 24 passed

$ accio myapp fastlane deliver
APNS_KEY.p8 arrives as a temporary file

Bring Your Keys In

Paste them in the app, or move a whole .env over. Then delete the file.

accio import

Set Up Your Agents

One click adds instructions for these. Any other agent gets a prompt to paste.

Claude CodeCodexGemini CLI

One Name, Many Projects

Each app gets its own project, so STRIPE_KEY can be your test key in one and your live key in another. Keys in shared reach every project, and a project's own key wins.

myappSTRIPE_KEYtest key
billing-apiSTRIPE_KEYlive key
sharedOPENAI_KEYevery project

A Native Mac App.

Made for people first. Browse, edit and copy your keys with Touch ID, in light or dark.

The fidelius window: project myapp is selected and STRIPE_KEY is open, with its value hidden.The fidelius window: project myapp is selected and STRIPE_KEY is open, with its value hidden.
Touch ID
to show STRIPE_KEY
Touch IDAsked before a value is shown or copied.
productionstagingclientios
Tags and Your Own OrderTag your keys and sort things the way you think about them.
OLD_STRIPE_KEYRestore
TEST_TOKEN2 days ago
Recently DeletedDeleted keys wait there until you remove them.
Today, 09:12
Yesterday, 18:40
BackupsEncrypted copies of everything, ready to restore.

On Every Mac You Use.

Your keys live in iCloud Keychain and sync between your Macs with Apple's end-to-end encryption. Add a key on your laptop and it's on your desktop a moment later.

There's no fidelius account to create and no fidelius server to trust.

myapp
shared
MacBook Air
STRIPE_KEYKey
NEW_KEYKey
myapp
shared
Mac Studio
STRIPE_KEYKey
NEW_KEYKey

Where Your Keys Live.

Plain answers, so you can decide whether to trust it.

In the Keychain

Stored by macOS, locked with your Mac, and shown only after Touch ID or your Mac password.

Rarely Online

The app only goes online to check your Pro license with Polar and, if you allow it, to look for updates. Your keys never go to a fidelius server.

Masking, Best Effort

When an agent runs accio, values printed by accident are replaced with their names. It catches mistakes. What agents see

Pay Once.

Everything works for free in one project. Pro adds as many projects as you need.

Free

$0
For trying it on one project
  • The shared project
  • accio, agents, sync, backups
  • Every app feature
Download free

Pro

$24once
For all your projects
  • Unlimited projects
  • Every fidelius 1 update
  • All your Macs, no device limit
Buy Pro

Questions.

Something else? Write to support and a person answers.

Your Keys, Kept on Your Mac.

Download free  Buy Pro for $24
brew install --cask nphardorworse/tap/fidelius