KeyRunner
Turn existing APIs into governed AI tools in under 5 minutes. Give agents capability, not credentials.·keyrunner.app
KeyRunner is a local-first API client for developers (desktop, VS Code extension, and CLI) that also converts enterprise APIs into governed AI agent tools. It enforces policy checks, injects credentials from vaults at runtime, applies approval gates and time-boxing, scores blast radius, redacts sensitive response data, and logs every execution in an immutable audit trail so AI agents never receive raw credentials.
What it's for
Features 20
- API testing, monitoring, and mocking
- Approval gates for high-impact write operations
- Blast radius scoring of agent actions
- Contract governance - per-agent capability contracts
- Convert enterprise APIs into governed AI tools in under 5 minutes
- Data anonymization
- Data classification by sensitivity level
- Immutable audit trail / audit logs
- Local-first API client for developers
- Mock servers
- OpenAPI spec import
- Policy check - validate tool calls before execution
- Rate limiting per agent
- Response redaction - strips PII, PHI, PCI data
- Scriptless testing & playground
- Secret injection - runtime credential isolation
- Secrets scanner
- Time boxing - max execution duration per tool call
- Vault, 1Password, and PAM integration
- VS Code extension and CLI
At a glance
Integrations
Complianceself-reported
Pricing
Enterprise plan and AI Tools Add-on are quote-based/custom pricing, not numerically stated. Local-Lite is free forever with no credit card required.
No credit card required.
For individual developers
Marked 'Most Popular'; team set up within 24 hrs.
90-day audit retention
Custom pricing, contact sales.