Innkeeper: 2FA for AI Agents

Innkeeper is context-aware agent authentication, because MFA isn't enough. Your agents on your Mac, Claude Code, Claude Desktop and Codex, make requests as you. Innkeeper puts your phone in front of the ones that matter. Every call that spends a credential, sends as you, or cannot be taken back stops on your iPhone first. You read exactly what is being asked, who is asking and why, and you approve with Face ID. The agent gets its answer and never holds a credential. HOW IT WORKS 1. Pair once. Scan the code the Mac app shows. Your phone makes a key in the Secure Enclave, and that key is the whole account. No password, no sign-in. 2. The agent asks. A flagged call stops, and your phone gets the request: the tool, the arguments as they were written, who is asking, and how long it has left. 3. You read it. Approve signs the exact bytes you read, with a key that never leaves the enclave. Change one character and the signature no longer matches. Deny needs no face. 4. It goes back signed. The verdict returns to the agent as an ordinary tool result. Innkeeper attaches the credential, so the agent never holds it. Every call is written down. WHAT THE PHONE HOLDS The credentials you add live in your phone's keychain. A credential leaves the phone only when you approve a call that spends it, sealed to the one Mac that asked, for one use. The Mac holds nothing at rest. AT HOME AND AWAY On your own network the phone and the Mac talk directly, sealed to keys they agreed at pairing. Elsewhere, the same sealed envelopes travel through a relay that keeps no accounts and cannot read them. Push notifications arrive through Apple, saying only that an approval is waiting. WHAT WE COLLECT Nothing. No account, no email, no analytics, no tracking. REQUIRES The Innkeeper app for Mac, macOS 14 or later, free at innkeeper.a2w.io. One Mac and one phone is free, and stays free.