Installation

Keystore provides SDKs for TypeScript and Python, plus a CLI for managing tokens and credentials from your terminal.

TypeScript SDK

The @keystore/sdk package works in Node.js, Deno, Bun, and edge runtimes that support globalThis.fetch.

npm

bash

npm install @keystore/sdk

pnpm

bash

pnpm add @keystore/sdk

yarn

bash

yarn add @keystore/sdk

Bun

bash

bun add @keystore/sdk

Provider peer dependencies

The SDK has optional peer dependencies for provider-specific wrappers. Install only the ones you need:

bash

# OpenAI
npm install openai

# Anthropic
npm install @anthropic-ai/sdk

# Neon
npm install @neondatabase/serverless

# Resend
npm install resend

# AWS S3
npm install @aws-sdk/client-s3

If you use interceptAll(), you do not need any peer dependencies — it works by patching fetch directly.

Python SDK

The Python SDK is published as the envclaw package on PyPI.

pip

bash

pip install envclaw

Poetry

bash

poetry add envclaw

uv

bash

uv add envclaw

Basic usage

python

from envclaw import Keystore
from openai import OpenAI

ks = Keystore(agent_token="ks_a1b2c3d4e5f6...")
ks.intercept_all()

client = OpenAI(api_key="unused")
response = client.chat.completions.create(
    model="gpt-4o",
    messages=[{"role": "user", "content": "Hello!"}],
)

ks.restore()

CLI

The Keystore CLI lets you manage agent tokens, list providers, and test connections from your terminal.

bash

npm install -g @keystore/cli

Or with pnpm:

bash

pnpm add -g @keystore/cli

After installation, authenticate:

bash

keystore login

Environment variables

Both SDKs accept configuration through the constructor. You can also set environment variables for convenience:

Variable	Description
`KEYSTORE_AGENT_TOKEN`	Default agent token (used if not passed to constructor)
`KEYSTORE_PROXY_HOST`	Custom proxy hostname (default: `proxy.keystore.sh`)

Next steps

Quickstart — End-to-end setup walkthrough
SDK Reference — Full TypeScript API documentation