aikey Quickstart
The personal edition of aikey provides a local encrypted vault and proxy to manage your AI credentials securely. Installs to ~/.aikey/bin (macOS/Linux) or %LOCALAPPDATA%\Aikey\bin (Windows).
Install
macOS / Linux
Run the stable one-liner to auto-detect and install the latest release.
curl -fsSL https://github.com/aikeylabs/launch/releases/latest/download/latest-install.sh | sh
To skip prompts in CI: curl ... | sh -s -- --yes
Windows (PowerShell)
Stage 4 windows-compat. Works in PowerShell 7+ or 5.1. Hardens NTFS ACL to owner-only for vault security.
$Tag = (Invoke-RestMethod "https://api.github.com/repos/aikeylabs/launch/releases/latest").tag_name
$Bare = $Tag.TrimStart('v')
iwr "https://github.com/aikeylabs/launch/releases/download/$Tag/aikey-installer-windows_${Bare}.zip" -OutFile "$env:TEMP\aikey-inst.zip"
Expand-Archive -Path "$env:TEMP\aikey-inst.zip" -DestinationPath "$env:TEMP\aikey-inst" -Force
& "$env:TEMP\aikey-inst\local-install.ps1"
After install, run aikey hook install for PowerShell auto-activation.
Use Your Own API Key
Add keys to the local encrypted vault and activate them for your session.
Add & Activate
aikey add my-key
aikey use my-key
CLI Integration
claude
codex
kimi
OAuth Accounts
Log in directly via OAuth for subscription-based access without explicit API keys.
Web Console & My Vault
View key status, usage, and manage your credentials through a secure local browser interface.
aikey web
My Vault: Lists every personal API key and OAuth account. Lets you rename, reveal (60s timer), or delete keys. OAuth tokens are never revealed in the browser for security.
Use Team Keys
If your admin has created team keys in the control panel:
aikey login # Log in via browser
aikey use # Pick a key (arrow keys + Enter)
CI / Scripts
Works with GitHub Actions, cron jobs, and non-interactive scripts. No shell hook required.
aikey run -- python eval.py
Daily Commands
Connectivity Test
Verify credentials by running the full probe sequence: Ping(D) → Ping(proxy) → API → Chat.
aikey test # Active bindings only
aikey test --all # Probe every credential in vault
Temporary Key Switching
Use aikey activate to switch keys in the current terminal only. Closing the terminal reverts everything.
Third-Party AI Clients
Configure Cursor, Continue, or OpenCode via custom base_url.
1. Get Route Config
aikey route my-key
base_url: http://127.0.0.1:27200/anthropic
api_key: aikey_vk_b82ef1d49c3a7e08...
{
"provider": {
"anthropic": {
"options": {
"baseURL": "http://127.0.0.1:27200/anthropic/v1",
}
}
}
}
Troubleshooting
aikey doctor
aikey proxy restart
aikey key sync
| Symptom (Windows) | Fix |
|---|---|
| EACCES on hook.ps1 | Close other PowerShell windows, then re-run without elevation. |
| Command not found | Open a fresh terminal to load updated PATH. |
| Upgrade in-place fails | Run aikey proxy stop before installing. |