Blog

News & guides.

Deep dives from the Keystore team.

featuresecurity

Rate Limits and Budgets: Financial Safety Rails for AI Agents

How Keystore's rate limiting and budget controls prevent the $82K API key theft and $47K recursive agent loop scenarios that are becoming commonplace. Real incidents, real numbers, real enforcement.

announcementcli

Announcing the Keystore CLI

Manage your Keystore vault from the terminal. The new @keystore/cli brings provider management, token creation, credential rotation, and audit log queries to your command line --- replacing the .env anti-pattern with the practices security experts actually recommend.

tutorialagents

Build a Multi-Provider Agent in 5 Minutes with Keystore

A step-by-step tutorial for building an AI agent that uses OpenAI, Anthropic, and Google Gemini through a single Keystore token. Real provider pricing, real rate limits, real budget controls.

securityencryption

How Keystore Encrypts Your Credentials: A Security Deep Dive

A technical look at how Keystore protects your API keys using AES-256-GCM encryption, key derivation, and proxy-based decryption. Understand the cryptographic architecture that keeps your secrets safe.

guideproviders

BYOK vs Marketplace: Choosing the Right Credential Model

AWS KMS, Azure Key Vault, and GCP Cloud KMS all support BYOK for good reasons. Here's how the same principle applies to AI agent credentials, and when a marketplace model makes more sense.

openclawagents

The Last Secret Key: One Token for Autonomous Agents

With 97M monthly MCP SDK downloads and 10K+ servers, the agent ecosystem needs a credential model that actually works. Here's why one opaque token replaces them all.

securityagents

Why AI Agents Should Never Hold API Keys

EchoLeak, LangGrinch, and $82K in stolen Gemini credits. The evidence is in: giving AI agents raw API keys is an indefensible security practice.

announcementlaunch

Introducing Keystore: A Key Vault for AI Agents

23.8 million secrets leaked on GitHub last year. AI agent frameworks store credentials in plain env vars. Keystore is a vault + proxy purpose-built to fix this.