Skip to content
SnugDownload for Mac

Snug

Your agent uses the key
but never sees it

Snug is a clipboard manager for your Mac. Copy a key or a password and it goes into your Keychain. Your agents can use it, with your OK.

Download for Mac

7-day free trial. No account.

  • Copied from Safarisnug://sec_xw47
    API key
  • Copied from Safarisnug://sec_k2mq
    Access token
  • Copied from Safarisnug://sec_7f3a
    Password
  • Copied from SafariKEY=snug://sec_p9tz
    Env line

A quick tour

From one copy to a working call

  1. Your agent waits, you just copy

    Ask for something that needs a key. The agent runs snug wait --secret and waits. Copy the key on your provider's page: the value goes into the macOS Keychain, and the agent gets a ref the moment you copy. Nothing goes into the chat or a .env file. Its program gets a fake key, and Snug puts the real one in on the way to api.anthropic.com.

    Claude Code in the project shop. You type: Run hello.py with my Anthropic key. The agent asks you to copy your Anthropic key and runs snug wait --secret, which shows Running… while it waits. In the browser below, on console.anthropic.com, you click Copy next to the new key. In that moment the wait prints sec_xw47 anthropic ending cgAA. Then the agent runs snug run --proxy ANTHROPIC=sec_xw47 -- python hello.py. The output shows the key only as [snug proxy sec_xw47], then ok.

  2. You say yes, once

    The first time, a panel asks you. Deny is the default, and Allow waits one second, so a click meant for something else does nothing. Your yes covers this program in this project.

    The Snug panel: Terminal → claude wants to use your Anthropic key in project shop. It can only reach api.anthropic.com, and only while the program runs. Allow also covers later runs of this program in this project. Deny is the default button. Allow is gray for one second, then the pointer moves to it.

  3. Deletes and payments need your finger

    A call that spends money, deletes something or changes the account shows the exact request and asks for Touch ID. Calls that make new keys are blocked where the API has them. An API that puts every call on one GraphQL route is the exception. Settings, Keys counts every use.

    A risky call: Terminal → claude wants to send a call with your Anthropic key in project shop that needs your approval. DELETE https://api.anthropic.com, path /v1/files/file_x. Why it asks: Anthropic: DELETE /v1/**. After Allow, a Touch ID sheet asks to allow one Anthropic call: DELETE /v1/files/file_x. The finger is read. In Settings, Keys, the Anthropic key now says: Used 66 times today by Claude Code in shop. 2 needed Touch ID. 5 blocked.

Even if your agent goes rogue

A prompt injection, a bad package or a poisoned README can take over an agent. Here is what it still cannot do with a key that works through the proxy.

Read it
The value stays in the Keychain. The agent and its programs get a fake key of the same shape.
Send it elsewhere
Each key is pinned to its own API. Only the app can set that.
Find it in a reply
Snug takes the key out of every answer before the program reads it.
Approve itself
Only you can allow, in a panel on your Mac. Risky calls need your Touch ID.
Change the rules
Hosts, grants and limits change only in the app. The command line has no way to write them.
Make new keys
Calls that make new keys are blocked where the API has them. Other account changes need you. An API that puts every call on one GraphQL route is the exception.
Keep using it
The fake key stops working when the program ends.
Spend without limit
Each run has a cap on requests: 60 a minute and 2000 a run.

No tool makes a hacked agent harmless. A call you allowed can still carry your files out, and another program of your user can use a live run.

And it is a great clipboard

The shelf, pinboards, search and the Paste Stack, the way you know them from Paste. Text, links, images and colors wait on the shelf until you need them again.

Shift-Command-V: the Snug shelf slides up from the bottom of the screen, over a Safari window. Its cards come in, newest first, and the first is selected. A link from Safari, just now: Clipboard (computing) - Wikipedia, en.wikipedia.org. A text from Notes, 2 minutes ago: Dinner on Friday at 8. Table for four, by the window. An image from Preview, 5 minutes ago, 1600 by 1200 pixels. A shell loop from Terminal, 9 minutes ago: for f in *.png; do sips -Z 1200 $f; done. A color from Safari, 14 minutes ago: #0377EE.
The Paste Stack holds three copies in copy order: Fixed the login redirect loop, github.com/acme/shop/pull/482, Today: the checkout tests. In Notes, Command-V goes down three times. Each press pastes the next copy into the note and takes it off the stack, until the stack is empty.
Shelf
Shift-Command-V opens your history along the bottom of the screen, newest first.
Quick Paste
Command-1 to 9 pastes a card. Add Shift for plain text.
Link previews
A link card shows the title and the picture of its page.
Pinboards
Keep clips in named boards with a color. Command-Left and Command-Right switch.
Search
Type to search. Filter by type, date, pinboard and app. Typos are fine.
Paste Stack
Shift-Command-C. Copy a few things, then paste them in order.
Keep History
Keep clips for a day, a week, a month, a year or for ever. Erase History empties it and keeps your pinboards and your secrets.
Ignored apps
Copies from the apps you choose are never saved.
Pause
Command-T, or for 15 minutes, 1 hour or until you resume.

Works with your agents and your secrets

It catches API keys, access tokens, passwords, private keys, database URLs and env lines.

  • Passwords your password manager marks as hidden
  • Known key shapes from dozens of services
  • A random value after a name like API_KEY= or after Bearer
  • A long, random-looking token copied on its own

For the big AI and developer services, the agent uses the key through the proxy and never sees it. For everything else, the key goes into the command's environment with your approval, through snug run --env.

Pick a plan

Try the full app for 7 days first. Then one license key keeps it all working.

The trial is 7 days with the full app. After it, you can still see, copy and delete everything you saved. Only new copies and agent access stop.

Questions

What does it cost?

$2.99 a month, $19 a year, or $49 once for lifetime at the launch price. Every plan is one license key for 3 Macs with every feature, and the first 7 days are a free trial of the full app. See the plans

Does my key leave my Mac?

A key that works through the proxy leaves only on its way to its own API, and only for a program you allowed. Snug keeps the value in the macOS Keychain, and sends nothing to us. It has no telemetry.

What if my agent is hacked?

With a key that works through the proxy, it still cannot read the key or send it to another host. It can only make the calls you allowed, while its program runs, within the caps of the run. Deletes, payments and admin calls need your Touch ID, and calls that make new keys are blocked where the API has them. An API that puts every call on one GraphQL route is the exception. No tool makes a hacked agent harmless, and the safety section says what Snug cannot stop. Read the limits

Which agents does it work with?

Claude Code, Codex, Cursor and any agent that can run a command. The agent runs snug wait --secret, then snug run --proxy. A skill teaches Claude Code both. For any other agent, Copy Agent Instructions in Settings gives it the same steps. Inside Codex's sandbox, approve the Snug command when Codex asks.

What does it catch?

API keys, access tokens, passwords, private keys, database URLs and env lines. It knows passwords that your password manager marks as hidden, key shapes from dozens of services, a random value after a name like API_KEY= or after Bearer, and a long, random-looking token copied on its own. For the big AI and developer services, an agent uses the key through the proxy and never sees it. For everything else, the key goes into the command's environment with your approval, through snug run --env, and then the program holds the value.

Can I see how my keys are used?

Yes, for keys that work through the proxy. In Settings, Keys, each key shows how often it was used today, by which agent and in which project, how many calls needed Touch ID and how many were blocked. Its log lists the calls of the last 30 days, newest first: when, which program, which API path and what happened. The log never holds the key, the body or the query, and a changed entry shows as changed. A key used through snug run --env shows only when it was last used. A deleted entry does not show.

Does it replace Paste?

That is the plan. The shelf, pinboards, search with filters, Quick Paste and the Paste Stack are in. Text in images, resizing the shelf and editing a clip are not yet.

Copy the key, keep it snug

Download for Mac

7-day free trial. No account.