A real safety net if a command echoes a secret back out.
Claude Keychain now scans a command's output before it's returned and redacts any exact, unmodified copy of the secret it finds, so a command that carelessly prints its own environment (env, echo $VAR) gets [REDACTED] instead of leaking the value. This is a safety net, not a sandbox, and it doesn't catch everything. Full breakdown here.
1.0.9
Faster with a lot of secrets, and a menu bar icon you can pick.
The Secrets list re-read the whole Keychain index on every keystroke in Search. It now filters in memory, so search stays instant past a few hundred secrets.
Settings → General: choose the menu bar icon color, from five options, with a live preview.
Tabs slide in and their hover glides, the secrets list draws itself in, rows sit lighter. The menu bar popover closes when it opens the full window, and the toolbar no longer jumps or hides the gear.
1.0.8
Much less CPU with the window open.
The Log tab was re-reading its whole history from disk every second, even while you were looking at Secrets. It now does less than a tenth of the work, so Claude Keychain stays out of its own way.
1.0.7
Long secret values, truer logs, and fixes across every tab.
Secret values over a few hundred characters no longer got cut off in the reveal view.
The Log tab no longer shows a use from before a secret was renamed as a use of the new name.
Every tab lays out correctly at the smallest window size, and figures read correctly in every language.
Smaller fixes across Connect and Settings.
1.0.6
Keep Claude Keychain in the Dock, and a new installer.
Turn on Settings → General → Show in Dock, and Claude Keychain stays in the Dock, so you can choose Keep in Dock and open it from there. The menu bar item stays either way.
The download now opens on a proper install window: drag Claude Keychain to Applications and you're done.
1.0.5
Deleting a secret that won't delete, and connecting from a fresh Terminal.
Deleting a secret now offers Delete and Force Delete, for the rare Keychain entry that won't remove when asked, verified against both the Keychain and the local index either way.
claude mcp add now works the first time from a Terminal opened right after install, instead of needing a restart.
1.0.4
Importing a .env file with quoted values.
.env files that wrap values in single or double quotes, or that use export before the key, now import cleanly instead of keeping the quotes as part of the secret.
1.0.3
A way to tell us how Claude Keychain is working for you.
A week after you start using Claude Keychain, the menu bar panel asks once how it's going. You can also write to us any time from Settings → About.
1.0.2
A quicker way to reconnect after moving to a new Mac.
Settings → About now has a single Reconnect Claude Code button, instead of needing to remove and re-add the MCP server by hand.
1.0.1
The first public build, for Apple silicon and Intel.
Runs natively on Intel Macs as well as Apple silicon.
A welcome screen that explains how Claude Keychain works, in three steps, before it asks you to add a secret.
A new app icon, in five colors.
1.0.0
The first release.
Add, reveal and delete secrets, stored in the macOS Keychain, not a database. Secret names only are tracked locally so the app can list them; values live in the Keychain alone.
Import a .env file at once, instead of adding secrets one at a time.
Connect to Claude Code in one click. It ships its own MCP server, exposing a tool to list secret names and a tool to run a command with a chosen secret injected as an environment variable.
A log of when each secret was last used by Claude.
A menu bar item, with a compact view of your secrets behind it.