A local key vault for macOS
Your dev keys.
On your Mac.
API keys and key files, organized by project and environment.
Review the request. Connect the keys you need.
Free · 0.7.17 BetaApple Silicon · macOS 14+
Choose Korean, English, or your system language in Settings.
Cellar · Actual app screen · Fictional projects and keys.
Keep each project's keys together.
01 / Organize
Start with a project.
Choose an environment.
Select a project to find its keys.
Switch environments to choose the right ones.
Choose a feature to explore the app screen.
02 / Original files
Some keys
are files.
Keep certificates and service account files in the same vault.
Original files · Up to 1 MiB per fileKeep .p8 private key files for Apple services and other uses in their original format.
•••• •••• •••• ••••15 seconds until hidden again
An example of how it works. This is not a real key.
03 / Use your keys
Easy to reach.
Briefly visible.
Open Cellar from the menu bar and copy the key you need.
Hidden again after 15 seconds
Reveal a key only when you need it.
Clipboard cleared after 30 seconds
Copied keys are cleared automatically.
Lock the vault and check pending requests from the menu bar.
04 / Connect tools
The keys you choose.
The tasks you approve.
Your terminal, build tools, Codex, and Claude. Review and approve which credentials a task can use.
Setup and connectionskeydesk run --project my-app --env dev \
--only OPENAI_API_KEY -- npm run devOnly selected environment variables or original files are passed to the tool. Approved SDK, build, and CLI processes receive actual credentials. Review the tool before approving.
Call the API with this project's
OpenAI development key.
Cellar's local broker authenticates supported MCP API requests. You don't need to paste the key into chat. Setup and request approval are required.
Local storage and backups
Stored on your Mac.
Backup status in view.
Keys and original files are encrypted locally. Choose iCloud Drive, a Google Drive sync folder, or another folder for automatic backups. Check iCloud upload status in Cellar and Google Drive sync completion in Google Drive.
- Encrypted local vault
- Encrypted iCloud · Google Drive backups
- Open source · MIT license
What has been verified in the beta
Cellar is in beta and has not had an independent security audit. Backup recovery has been tested on the same Mac; recovery on a different Mac has not yet been verified. Keep a separate encrypted backup and your recovery key.
Which Macs are supported?
Cellar runs on Apple Silicon Macs with macOS 14 or later. An Intel build is not available. The app supports Korean and English, with a system language option in Settings. The release is signed with Developer ID and notarized by Apple.
Is Cellar free?
The current 0.7.17 beta is free to download from GitHub. The source is available under the MIT license.
Can Codex or Claude see my keys?
For supported MCP API requests, Cellar's local broker adds authentication, so you don't need to send the key value in the conversation. SDK, build, and CLI tools that you approve receive the selected credentials. Review the tool and request before approving.
Can I store files as well as API keys?
Cellar can store original .p8, .pem, service account JSON, .p12, and .jks files. Each file can be up to 1 MiB. Cellar does not automatically delete the original file you import.
How do I move to a new Mac?
You'll need an encrypted backup and a recovery key. Backup recovery has been tested on the same Mac; recovery on another Mac has not yet been verified. Keep a separate backup and your recovery key before moving, and read the installation guide.
Installation guide ↗How do I get started?
Unzip the download, move Cellar.app to ~/Applications, and open it. Create a project and add your first key. You can turn launch at login on or off in app settings. Set up CLI and AI connections separately using the app's backup and CLI settings and the installation guide.
Installation guide ↗Cellar for Mac.
Bring your development keys into one place.
Free · 0.7.17 Beta
Apple Silicon · macOS 14+
Choose Korean, English, or your system language in Settings.