Very nice. I use 1Password, and I set up API keys for my agents based on their role, so each agent gets the tokens it needs in its environment before I start Claude. Convenient, but definitely not secure, as the agent can see the tokens. This one is much better.
Cool project. The convenience gap is the real problem here: it's so easy to give agents way more access than they need that most people don't bother scoping anything. Tools like this that make least-privilege the default are going to matter a lot.