Privacy, with less mystery.

What Keydrop is

Keydrop has no user accounts, app database, analytics, advertising or cloud credential service. The native secure field temporarily processes what you enter so the app can save it in your Mac's login Keychain using Apple's Security framework. Keydrop is sandboxed and has no network entitlement.

What travels over MCP

The MCP connection carries the service and account names, a completion status, and from version 1.1.0 an optional provider page address suggested by your agent. Keydrop does not send the entered credential through MCP and provides no credential read, list or export tool. Your chosen MCP client has its own privacy practices and may retain the metadata you send it.

Provider links (version 1.1.0 and later)

When your agent suggests a provider page, Keydrop shows only its site name and opens it in your default browser when you click. Keydrop does not verify the page, does not load it itself, and does not store the address after the request ends. The browser and the provider then handle that visit under their own policies.

Clipboard handling

When you paste into the secure field, Keydrop clears the current clipboard after successful insertion if the clipboard has not changed. It does not monitor your clipboard in the background or access another clipboard manager's history. Other apps may have retained a copy before you pasted.

Key format hints

Keydrop compares what you type against a built-in table of key formats, on your Mac, to show a hint like "Looks like an OpenAI key." Nothing about the key or the hint leaves the window.

Storage and control

Saved credentials remain in Apple Keychain until removed by you or another authorized consumer. macOS controls access and may request permission when another tool uses an item. Keydrop does not weaken those access controls. Manage saved items in Apple's Keychain Access app.

This website and support

This website uses no analytics scripts and sets no cookies. Our hosting provider processes normal connection information to serve the site. If you email support, we receive your message and reply address. Please do not send passwords or tokens.

Questions: chris@outergy.com. Operated by Outergy Group, LLC.