KeepAI is a local API hub for AI agents that replaces raw app credentials with fine-grained permissions, human approvals, and a full audit trail — connecting agents like OpenClaw, Claude, and Codex to Gmail, Notion, GitHub, and more without ever exposing your keys.
What is KeepAI?
KeepAI is an open-source permission layer that sits between AI agents and your applications. It takes agent API requests, checks them against per‑agent policies, and either allows, blocks, or requests human approval before forwarding to apps like Gmail, Notion, Dropbox, HubSpot, Trello, GitHub, and Airtable. Credentials stay on your own device — end‑to‑end encrypted, never transmitted to any server. The product is built by an independent team and is fully open source under AGPL‑3.0 (GitHub).
Key Features
- Fine-grained permissions — Scope each agent to specific apps and actions (e.g., read Gmail only, not send); coarse app‑level permissions can be narrowed per agent.
- Human approvals — Require manual confirmation for sensitive actions (e.g., deleting emails, sending messages) while routine tasks run automatically.
- Full audit trail — Every action attempted or executed is logged with timestamps, agent ID, and app; accessible from a single dashboard.
- Instant revocation — Pause or revoke any agent’s access with one click, no need to hunt through separate app API dashboards.
- End‑to‑end encryption — All data in transit and at rest encrypted; policies and configurations are unreadable to anyone but you.
- Hardware‑level isolation — Agent processes and credential storage run in isolated environments, so a compromised agent cannot reach your accounts.
- Multi‑app, multi‑agent support — Connect one app once and let any number of agents use it with independent permissions; add new agents without reconnecting.
Who is it for?
- Developers building multi‑agent setups — Give each agent its own policy without managing separate API keys, rotation schedules, or app‑specific dashboards.
- Power users running OpenClaw, Claude, or Codex — Let agents automate Gmail, Notion, or GitHub tasks while keeping kill‑switch control and audit logs.
- Teams piloting agentic workflows — Start with one agent and one app, then scale to many without losing oversight; onboard new team members by connecting their agent through KeepAI.
Use cases
- Email automation with safety nets: Let an agent read, sort, and archive emails automatically, but require approval before it sends, deletes, or triggers password‑reset flows.
- Notion workspace management: Allow an agent to create new pages and update existing ones while blocking deletion or permission changes.
- GitHub PR triage: Give an agent read/write on issues and PRs but require human confirmation for merge operations or repository settings.
How does it work?
- Install KeepAI on your trusted device (Mac mini, VPS, Docker) — no sign‑up required.
- Connect your applications (Gmail, Notion, etc.) by authenticating once; credentials never leave your machine.
- Connect your agent — the agent sends requests to KeepAI instead of directly to apps; KeepAI enforces policies, logs actions, and prompts for approval when needed.
Pricing
Free during open beta. No sign‑up required. Open source under AGPL‑3.0.
FAQ
Is KeepAI free?
Yes, it is free during open beta. No credit card or account creation is needed. The source code is publicly available on GitHub.
Does KeepAI store my data?
No. KeepAI logs which actions were attempted and executed, but your credentials, tokens, and application data remain on your device. The logs are stored locally and are never sent to KeepAI servers.
