Credential operations

Keez

A local macOS CLI for finding and rotating developer credentials safely.

Keez gives developers a clear inventory of credentials that have spread across local configuration files, without turning the inventory itself into another secret store. Values remain in macOS Keychain while the CLI tracks redacted metadata and shows where each credential is used.

When a key needs to change, Keez previews every affected location with values masked, then applies updates through durable, mode-preserving file writes. A previous value is retained for recovery, so rotation becomes a deliberate, reviewable workflow instead of a risky search-and-replace across projects.

Keez terminal output listing a demo credential by masked fingerprint and its two fixture files — Inventory output identifies a credential and its known files without printing the value.

Keez terminal output confirming two demo credential locations including a JSON path — Location output distinguishes confirmed files and identifies the structured JSON field.

Keez terminal output showing a masked rotation diff and successful fixture updates — A demo-only rotation previews every change with values masked before durable writes are reported.

← Back to work