Skip to content

Releases: kirank55/keman

Release list

v0.1.0-beta

v0.1.0-beta Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Oct 10:16
v0.1.0-beta
df388c1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The first public beta of Keman: a self-hosted proxy that keeps your real API keys and hands apps virtual ones. When a virtual key leaks, it may not work at all, it expires on its own, you get an alert that says who used it and from where, and you kill it in one command without touching the real key.

Install

curl -fsSL https://raw.githubusercontent.com/kirank55/keman/main/scripts/install.sh | sh

Or download a binary below, run go install github.com/kirank55/keman/cmd/keman@v0.1.0-beta, or use the image:

docker pull ghcr.io/kirank55/keman:0.1.0-beta

Then:

keman scan . --history   # find keys you already leaked; no setup
keman init && keman      # set up and open the terminal UI

Highlights

  • Virtual keys for 21 platforms with ready presets (OpenAI, Anthropic, OpenRouter, Gemini, Groq, Mistral, DeepSeek, xAI, Together AI, Fireworks AI, Cerebras, Stripe, GitHub, Slack, Twilio, SendGrid, Resend, Postmark, Cloudflare, Linear and Notion), and any other HTTP API that takes a key in a header or HTTP Basic.
  • Locks to addresses and countries, path and model allowlists, rate limits, and dollar caps.
  • Alerts to Slack or a signed webhook for new countries and networks, spikes, blocked requests, and use of disabled keys.
  • Canary keys that look real and raise a critical alert on any use.
  • One-step containment with keman key rotate <name> --grace 0.
  • keman scan finds provider keys in files and every commit, and names the preset that moves each one behind Keman.

Assets

File What it is
keman_<os>_<arch> Static binary (.exe on Windows)
*.sha256, checksums.txt SHA-256 sums
*.spdx.json SPDX SBOM
*.bundle Keyless cosign signature; see SECURITY.md
install.sh The install script

Known limits

This is a beta: a single instance on SQLite, HTTP only (no WebSockets), and no bundled GeoIP database. See beta.md for the full scope. Please report bugs at https://github.com/kirank55/keman/issues and security issues privately as described in SECURITY.md.

Loading