# Install keepkey-agent with Homebrew Keepkey Hardware-based SSH/GPG agent. Version 0.9.0 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:keepkey-agent ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install keepkey-agent ``` Evidence: local Homebrew formula metadata ## Package facts - **Package key:** brew:keepkey-agent - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.9.0 - **Source summary:** Keepkey Hardware-based SSH/GPG agent - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** LGPL-3.0-only - **Source archive:** - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - keepkey-agent (cli) - keepkey_agent.py (cli) - keepkey-agent (alias) - keepkey_agent.py (alias) ## Dependencies - cryptography - hidapi - libsodium - libusb - python@3.14 ## Build dependencies - pkgconf ## Uses from macOS - libffi ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.9.0 - Local data: ok - Upstream repository: https://github.com/romanz/trezor-agent - info: No package-manager update timestamp was available. - info: No cached GitHub release or tag data was available. ## Project history and usage keepkey-agent is a KeepKey-focused package in the romanz/trezor-agent hardware-agent family. The broader project lets hardware security devices operate SSH, GPG, and age keys so private key material is generated and kept on the device instead of on the host computer. ### Project history The upstream trezor-agent repository was created on GitHub on 2015-06-06. Its README describes a shared libagent library plus device-specific agents for hardware-backed SSH, GPG, and age workflows. The keepkey_agent package appeared as a small Python package with version 0.9.0 on PyPI and was packaged by Homebrew as keepkey-agent. ### Adoption history Evidence for keepkey-agent itself is thin compared with trezor-agent. Its adoption signal is mainly package-manager availability through PyPI and Homebrew rather than a large standalone project identity. ### How it is used Users install the CLI to derive and use SSH/GPG identities from a KeepKey-style hardware wallet, fitting the same workflow as trezor-agent: signing commits or mail, authenticating SSH sessions, and avoiding exported long-lived private keys on disk. ### Why package nerds care The package is interesting because it sits at the overlap of cryptocurrency hardware wallets and Unix authentication tooling. For package collectors, it is a narrow example of reusing wallet hardware as a general-purpose agent rather than only as a coin-signing device. ### Timeline - 2015-06-06: romanz/trezor-agent repository created on GitHub. - 2016: Trezor firmware posts linked from the upstream README documented SSH login and GPG-related hardware-wallet workflows. - 0.9.0: keepkey_agent published on PyPI as a KeepKey SSH/GPG agent package. - 2026-07-01: Homebrew formula metadata listed keepkey-agent 0.9.0. ### Related projects - trezor-agent is the parent project and Trezor-specific CLI. - libagent is the shared library in the upstream repository. - onlykey-agent and jade_agent are sibling hardware-agent integrations named by the upstream README. ### Sources - - - - ## Security Notes broad file, network, media, or database tool signal. - **Geiger risk:** blue / medium - broad file, network, media, or database tool signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.ssh/agent.config ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** keepkey-agent - **Version Scheme:** 0 - **Revision:** 12 - **Bottle Stable Root URL:** - **Deprecated:** yes - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [hidapi](https://www.automicvault.com/pkg/brew/hidapi/) - Runtime dependency declared by Homebrew. - [python@3.14](https://www.automicvault.com/pkg/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew. - [trezor-agent](https://www.automicvault.com/pkg/brew/trezor-agent/) - Shares the same upstream source repository. - [pius](https://www.automicvault.com/pkg/brew/pius/) - Shares av.db curated category or tags: cli, cryptography, gpg, security. - [aescrypt](https://www.automicvault.com/pkg/brew/aescrypt/) - Shares av.db curated category or tags: cli, cryptography, security. - [aespipe](https://www.automicvault.com/pkg/brew/aespipe/) - Shares av.db curated category or tags: cli, cryptography, security. - [age](https://www.automicvault.com/pkg/brew/age/) - Shares av.db curated category or tags: cli, cryptography, security. - [age-plugin-se](https://www.automicvault.com/pkg/brew/age-plugin-se/) - Shares av.db curated category or tags: cli, cryptography, security. - [age-plugin-yubikey](https://www.automicvault.com/pkg/brew/age-plugin-yubikey/) - Shares av.db curated category or tags: cli, cryptography, security. - [botan](https://www.automicvault.com/pkg/brew/botan/) - Shares av.db curated category or tags: cli, cryptography, security. - [onlykey-agent](https://www.automicvault.com/pkg/brew/onlykey-agent/) - Both packages touch the same language runtime or ecosystem. Shared terms: agent, cli, cryptography, gpg, hardware. ## Combined YAML source View the package source record on GitHub. [combined/keepkey-agent.yml](https://github.com/automic-vault/db/blob/main/combined/keepkey-agent.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - cross-ecosystem install command graph