Agent asks
The agent runs Fidelius with the Keychain service and the secret names it needs.
A tiny macOS utility for agents
Fidelius lets an agent open a small native window when it needs credentials. You paste the keys. They go to macOS Keychain. The agent keeps working.
curl -fsSL https://fidelius.ashray.xyz/install.sh | bashmacOS · open source · no account required
I need these to finish the scrape.
scraperOne job
The agent runs Fidelius with the Keychain service and the secret names it needs.
A normal Mac app window stays available in Cmd-Tab while you provision the keys.
Press Enter. Fidelius saves the values, reports only character counts, and closes.
Unix on either side
It is not a secret manager. Once the keys are saved, agents use Apple’s familiarsecurity CLI to pipe them wherever they need to go.
fidelius -s scraper -m "I need these to finish the scrape." OPENAI_API_KEY STRIPE_SECRET_KEYsecurity find-generic-password -s my-app -a OPENAI_API_KEY -wFidelius never prints secret values.
The CLI blocks until you save or cancel, then returns a clean status to the agent.