Package manager, secrets manager, and execution control plane for autonomous agents on macOS.
Website | Docs | Main Repo | Latest Release
Important
Automic Vault is not affiliated with any cryptocurrency or token.
$ curl -fsSL https://automicvault.com/install.sh | sh -x
# ^^ downloads the DMG, lets Gatekeeper inspect it, checks our Team ID, then
# copies the app into /Applications
+ /usr/bin/curl -sSfL https://automicvault.com/av.dmg -o "$tmp/av.dmg"
+ /usr/sbin/spctl -a -vv --type open "$tmp/av.dmg"
+ /usr/bin/codesign -dv --verbose=4 "$app"
+ /usr/bin/ditto "$app" "/Applications/$(basename "$app")"If curl | sh gives you hives, fair. Read it first:
curl -fsSL https://automicvault.com/install.sh | code -Or download the DMG from GitHub releases.
Developer machines are filling up with autonomous agents that can read files, run tools, and use credentials intended for a human sitting at the keyboard.
Most agent security controls live inside the agent. Automic Vault puts a boundary underneath it: the packages, secrets, and commands the agent tries to use.
Use it when you need:
- installed tools that are harder for an agent or script to silently mutate
- secrets kept out of plaintext files, dotfiles, and model-readable context
- approval gates for high-risk operations
- local protection for credentials used by GitHub CLI, AWS CLI, MCP servers, package managers, and automation tools
Note
Automic Vault is the local runtime layer. It is not trying to replace every enterprise secrets platform, MDM product, or security policy your company has already spent six quarters arguing about.
| Project | What it is |
|---|---|
automic-vault |
macOS app, CLI, package manager, secrets manager, and approval gate system |
radioisotopes |
manifests for patched and agent-aware tool wrappers |
www.automicvault.com |
docs, install flow, and security notes |
agent
|
v
approval gate -> human says yes/no
|
v
tool wrapper
|
v
controlled package + secret access
The goal is not to make agents harmless. No. The goal is to stop every local
agent session from automatically inheriting the full authority of your shell,
your $HOME, and every credential a CLI has ever stashed away.
Automic Vault is macOS-first today.
Note
The main project has public milestones for Linux and Windows support. Until those land, assume this is for macOS developers and agent workflows.
- Read the main README if you want the product model.
- Open the docs if you want to configure it.
- Install the latest release if you want to try it.
Built by mxcl, creator of Homebrew.
