Take on client credentials.
Not client risk.
Hand off every project like the shop that's twice your size.
A Go-Live Custody Record for every engagement — generated by SherpaKeys from your activity in our system, signed by you, dated by us. Your agency looks bigger. Your client gets a real artifact for their files, their next developer, or their next round of funding. The vault, AI firewall, branded client onboarding, and auto-rotation behind it? All free.
Unlimited free projects. No credit card. No waitlist.
Browser-encrypted vault. AI never sees plaintext secrets.
DTC Launch
- Stripe · Supabase · GitHub
- Vercel · OpenAI · Resend · Cloudflare
- Audit log (19 events, timestamped)
- Signed methodology + agency principal
The product
The handoff document
that makes you the bigger agency.
Every engagement ends with the Go-Live Custody Record — generated by SherpaKeys from your activity in our system, signed by you, dated by us. The client files it, forwards it to their accountant, or hands it to their next developer. One $99 deliverable. Everything else is free.
- Generated from our audit log, not your imagination. The record is rendered from what SherpaKeys actually observed — credentials collected through our onboarding page, agent calls through our firewall, rotations performed by our orchestrator, dates timestamped by us. You couldn't fabricate it if you tried; you didn't write it.
- Two signatures, two scopes. The agency principal signs the line attesting to their procedures. SherpaKeys signs the line attesting to the log. Never blurred. The client (and their banker) can see exactly who's vouching for what.
- Your branding, not ours. Logo, primary color, custom footer. The record looks like your agency built it from scratch.
- Plain-English layer for the client. “What this means for you,” per-service captions, and “What to watch for” — so a non-technical founder can actually act on it.
- Generated, not previewed. No watermarked draft to screenshot. You fill out the form, click Generate, pay $99, and the rendered document exists. Edits stay free.
Three people. One document.
Everyone wins the handoff.
Most handoff problems are really three problems wearing one hat. The Custody Record solves all three at once.
You look like the bigger shop.
A branded, attested deliverable replaces the awkward 'trust us, we cleaned up' email. You execute on what you do best — building — while the document protects your image and earns the repeat referrals.
A simple, guided experience.
The credential side of a tech project is daunting. SherpaKeys hands your client a branded onboarding page tuned to their skill level — then leaves them with a one-page document that explains, in plain English, exactly what they now own.
An artifact, not a vibe.
When the client raises money, takes on a banker, or onboards a new auditor, they need paper, not assurances. The Custody Record is a real document — generated by SherpaKeys from our own log of what the agency did through our system, signed by the agency principal. Something they can file.
Client-work headaches
You've lived at least one of these.
Most agency owners we talk to laugh and then go quiet at three of the four. Normal agency chaos. The kind a process fixes once, and then never again.
“The client emailed us their live Stripe key.”
It’s in their sent folder, your inbox, and your contractor’s forwarded thread. Forever. There is no professional way to un-send a secret.
“Did your AI tools see our keys?”
The client read an article about AI agents leaking credentials. You ship with Claude every day. You need a better answer than “we’re careful.”
“Handoff day. No receipts.”
The project’s done. The client asks what was accessed, what was rotated, and what you still have. Right now the honest answer is a shrug and a Notion page.
“Three clients. Thirty keys. One folder of .env files.”
Client A’s keys one tab away from Client B’s. One wrong paste in one wrong chat, and you’re writing the worst email of your year.
The flow
Four stages.
All free.
One Custody Record at the end.
Every part of the engagement — collecting keys, building with AI, keeping credentials rotated — runs on free infrastructure built for client work. You only pay at the finish line, when you ship the document.
- 1
Collect credentials from your client · free
One click sends your client a branded onboarding page with a step-by-step guide for each stack you need (Stripe, GitHub, Vercel, Cloudflare, Supabase, Anthropic, OpenAI, AWS, and more). They paste keys into their own browser, which encrypts them with your public key before sending — SherpaKeys can't read them, only you can.
- 2
Build with AI — without exposing the keys · free
Your team ships with Claude, Cursor, or Codex through the SherpaKeys firewall. The AI asks for the API call; SherpaKeys makes it server-side and returns the response. Reads flow silently. Anything that moves money or data pauses for your approval in a real-time dashboard. Every call lands in the audit log.
- 3
Auto-rotate on a schedule · free
Mark a credential auto-rotating: every N days SherpaKeys generates a new key at the provider, pushes it to your deployment target, verifies it works, revokes the old one. Failures roll back to the old key with an alert. Production never breaks at 3am because a key expired.
- 4
Hand off with a Go-Live Custody Record · $99
At launch, generate the verifiable record — signed, dated, attested, sealed with a public verify URL the client can hit to confirm authenticity. The only paid moment in the workflow. Edits stay free; you can refine the document for as long as the engagement lives.
Straight answers
We'll tell you exactly what we can
and can't see.
The firewall, the cryptography, and the approval flow are MIT-licensed on GitHub — your client's security person can read every line. Credentials are encrypted in the browser; at rest, the vault is zero-knowledge. During an active agent call, the server decrypts that one credential just long enough to make the request, then zeros it. The model never sees plaintext. That's the honest tradeoff, and it's documented in full in our threat model.
- It is a controlled handoff workflow. Your client keeps ownership of their credentials; you keep a logged, revocable working window — and proof of both, from our log.
- It is not a compliance certification. The Custody Record documents activity within SherpaKeys. It is not a SOC 2, not a stack-wide audit, and not a judgment about the agency.
- It is not for what you ship. SherpaKeys sits between your AI tools and the client's APIs while you build — it's not a runtime secrets manager for the app you deliver.
A link you can forward
when a client asks “how do I trust this?”
SherpaKeys is SaaS — you sign up and use it; nothing to install on your machine or your client's. But the cryptographically critical part — the MCP firewall that stands between your AI tools and your client's API keys — is MIT-licensed on GitHub. When a client (or their CTO, banker, or auditor) asks how the AI gets the answer without seeing the key, forward them the repo URL. They read the source. You don't have to defend a marketing page.
Pricing
Everything is free.
Except the handoff.
Unlimited client projects. Unlimited credentials. Unlimited AI firewall calls. Unlimited auto-rotation. Unlimited branded client onboarding. The only paid moment in the system is when you generate a Custody Record at handoff.
Go-Live Custody Record
Pay per recordEverything else in the workflow is free, unlimited, no card required. Bill your client whatever you want for the launch closeout — most agencies bill $750 to $2,500. You keep the markup.
- Unlimited projects, credentials, audit log entries
- AI firewall + write-action approvals
- Branded client onboarding page per engagement
- Auto-rotation with rollback on failure
- Browser-encrypted vault · zero-knowledge at rest
- BIP-39 recovery, MIT-licensed firewall
No subscriptions. No seat fees. No platform tax.
First 10 agencies who sign up lock founder rates for life.
$79 per Custody Record (vs. $99) and a direct line to the founder during your build. We're selecting the first 10 from free signups based on engagement — no application, no apply form. Just start your first project.