What is Agentknock?

Agentknock stores developer secrets on your Android phone and provides them only to approved commands. You can use it from your own terminal, from scripts, or through a coding agent.

A secret can contain environment variables, such as API tokens and database credentials, or an SSH key for server authentication and Git signing. You give each secret a name, then select that name when a command needs it.

Your phone and computer work together

Agentknock has three components:

• The mobile device stores your secrets and decides whether to allow their use.
• The command-line client runs on the computer doing the work. It requests access from the phone and starts your command after approval.
• The cloud relay carries end-to-end encrypted messages between them. It does not have the keys needed to read their protected contents.

You pair each computer with your phone once. After that, the phone recognizes its requests. One phone can serve several paired computers, including remote development machines.

Keep using your tools

Run a command through the Agentknock CLI when it needs credentials. For example, if your phone holds a secret named github containing GH_TOKEN:

agentknock -s github -- gh repo view

Agentknock requests github, then starts gh with the approved value in its environment. The tool uses its usual authentication method. For SSH authentication and Git signing, the phone performs the private-key operation and returns the result instead of delivering the key.

The phone can ask you to review a request, allow it through saved access settings or a temporary grant, or send it to an optional AI reviewer. Using a coding agent and using AI review are separate choices; neither is required to run Agentknock.

Secret storage, pairing, CLI use, manual approval, and local access settings are free. Cloud AI review is the optional paid feature.

Where to start

Follow Getting started to connect your phone and computer and approve a request using a harmless test value.

For setup and use through an LLM agent, follow Install the agent skill.

If you are still evaluating the approach, read why use Agentknock to see how it fits your development workflow. Are my secrets safe? introduces its protections and trust assumptions.

Once set up, choose a task from Features. The CLI reference and Android reference explain individual commands and screens; Support covers compatibility, troubleshooting, and security details.