FixIt internal · credential infrastructure
Install Onyx
The encrypted vault for credentials, API tokens, and AI-safe secret use. Your agents borrow secrets at run time — they never see the values.
01Downloads3
Vault
Mac app
Create or unlock your encrypted vault, approve sensitive actions with Touch ID, and sync ciphertext with the Onyx server.
Bridge
MCP server
The local stdio server that lets AI tools use Onyx refs without putting token values into chat history. Ships on npm as @lovinka/onyx-mcp — the launcher fetches the signed native build and verifies its SHA-256.
claude mcp add --scope user onyx -- npx -y @lovinka/onyx-mcpAutopilot
AI setup files
Give these to Codex, Claude Code, or another assistant so it installs the app and MCP without asking for secret values.
02Access tiers3
Every secret picks its exposure — three tiers govern what an AI agent can do with each item in your vault, the same color language the app uses everywhere.
AI-Usable
injectableAgents can use this value at run time. It’s injected server-side and never shown to the model.
Gated
human_gatedVisible to agents as metadata only. Revealing the value requires your Touch ID approval.
Hidden
ai_hiddenInvisible to every agent. This secret never leaves your vault through the MCP.
Need the full setup flow? Open /install.