MoltenRock keeps your API keys encrypted on your Mac and out of plaintext configs, served only to the local AI agents you approve, with per-agent, per-key permissions and access logged. Keys are released securely to signature-verified apps only: OpenClaw works out of the box (secrets resolver + read-only email bridge). No account, no cloud, no telemetry - the vault runs fully offline. Requires a Mac with Secure Enclave (Apple Silicon or T2). Free tier