# Slinky

> Slinky keeps secrets out of files. A free, open-source, native Mac app (Apple silicon, macOS 26 Tahoe or later) for API keys and tokens, each project's .env variables, two-step backup codes and recovery keys. Everything is in one encrypted file on the Mac, opened with Touch ID (Secure Enclave), with a printed Recovery Key as the backup. No account, no server, no sync.

## What it does

- **Add Item (⌘N):** paste anything secret; the value turns into dots, Slinky recognizes the service (Stripe, OpenAI, Anthropic, GitHub, Supabase, Resend, AWS and more) and suggests where it goes. Warns about duplicates. Refuses crypto wallet phrases.
- **Projects:** drop a project folder; Slinky reads its .env files (read-only), sorts them into Local, Preview and Production, checks .gitignore, and uses .env.example to show what's missing. Copy an environment as .env lines, or save a names-only .env.example.
- **Recovery:** backup codes that cross themselves off when copied, low-code warnings, and recovery keys with a printed-copy reminder.
- **Quick Access (⌥⌘K):** find and copy from any app. Copies are marked private (concealed/transient), skipped by clipboard history apps, and cleared after 60 seconds.
- **Locking:** Touch ID to open; locks with the screen, on sleep, when idle, and after 12 hours.
- **Import:** 1Password .1pux or CSV (Apple Passwords, Bitwarden, a sheet of keys). Passwords are skipped.
- **Shortcuts:** Add to Slinky, Copy from Slinky (Touch ID every time; never returns the value), Open Quick Access, Lock Slinky.

## What leaves the Mac

Nothing about the person or their vault. Once a day Slinky asks GitHub for the latest release (can be turned off). Updates install in place only if signed by Slinky's developer (team B3U6BXA8KP).

## Coming in 1.1

A `slinky` command and an MCP server so AI coding tools can run apps with real keys while only seeing masked values, with approval and receipts.

## Download

- Latest DMG: https://github.com/heyderekj/slinky/releases/latest
- Homebrew: `brew tap heyderekj/slinky https://github.com/heyderekj/slinky && brew install --cask slinky`
- Source (MIT): https://github.com/heyderekj/slinky
- Signed but not yet notarized: first launch needs System Settings › Privacy & Security › Open Anyway.

## Family

- Dinky makes files smaller: https://dinkyfiles.com
- Binky sorts your files: https://binkyfiles.com
- Made by Testament Made, LLC: https://testamentmade.com · derek@testamentmade.com