keyroll

Every AI key your agents use, found and rotated in one command.

Railway, LiteLLM and OpenCode all had incidents touching AI provider keys in the same week. If one of your OpenAI, Anthropic or OpenRouter keys leaked today, how long would it take you to find every place it lives and replace it?

keyroll is a CLI I'm building for that moment:

• Inventory. Scans your machine, repos and CI and lists every model key, and which agent or tool uses it.
• One key per agent. Each agent gets its own key with a spend cap, instead of one shared key sitting in a .env.
• keyroll rotate --all. Revokes, recreates and rewrites the configs in one go. The goal is under 5 minutes instead of hours.

It's not built yet. If this is a problem you have, leave your email and I'll get in touch before writing the code.