KeyBridge

A Chrome extension for handing your own keys to your apps.

KeyBridge grabs your own API keys and tokens from sites you're signed in to and hands them to your apps, on this computer or on your phone through a QR code. Which sites it supports is defined by an expandable library of declarative recipes.

Install (developer mode)

1. Download keybridge.zip and unzip it.
2. Open chrome://extensions, turn on Developer mode, click Load unpacked, and pick the unzipped folder.
3. Pin KeyBridge to the toolbar.

If Chrome says "Loading of unpacked extensions is disabled by the administrator", your browser is managed (e.g. a work laptop). Use a personal Chrome profile or computer, or install from the Chrome Web Store once it's published there.

Use

1. Open the site and sign in. To try it without an account, open the demo site.
2. Click KeyBridge → Grab key. The key is found, checked with the service and shown masked.
3. Choose where it goes: open it in the app, send it to your phone with a QR code, or Copy key.

Optional: under Recipes, turn on Live capture for a recipe so the key is caught as soon as the site uses it. The toolbar icon shows a green dot when a key is ready.

More recipes: Recipes page → From the library (library.json), or paste a recipe or its URL. To write your own, see the recipe format. See the privacy policy for what KeyBridge does with your data.

Safety model

• No access by default. Grab uses activeTab, which only works on the tab you clicked the toolbar button in. Live capture asks Chrome for access to the recipe's sites when you turn it on.
• Data, not code. Recipes go through a strict validator: https-only targets and validation URLs, no catch-all sites, known strategy types only.
• Consent before adding. Imported recipes show what they read and where they can send the key, and you confirm before they're added.
• Nothing is sent automatically. Keys go only where you click. Live-captured keys are kept in storage.session (memory) and are gone when Chrome closes.