# Innkeeper: 2FA for AI Agents — Context-aware 2FA for AI agent

> Context-aware 2FA for AI agent (iPhone/iPad app by DENISLAV DENISLAVOV GAVRILOV.)

- Source: https://appshunter.io/ios/app/innkeeper-2fa-for-ai-agents/id6805020498 (this page in markdown: same URL + `.md`)
- Developer: [DENISLAV DENISLAVOV GAVRILOV](https://appshunter.io/developer/1889295257)
- Category: Developer Tools, Utilities
- Price: Free
- Age rating: 4+
- Requires: iOS 26.0 · 2 MB
- Languages: American English
- Released: 2026-09-10
- Data updated: 2026-09-15
- User reviews in markdown: https://appshunter.io/ios/app/innkeeper-2fa-for-ai-agents/id6805020498/reviews.md

## What is Innkeeper?

Innkeeper is context-aware agent authentication, because MFA isn't enough.

Your agents on your Mac, Claude Code, Claude Desktop and Codex, make requests as you. Innkeeper puts your phone in front of the ones that matter. Every call that spends a credential, sends as you, or cannot be taken back stops on your iPhone first. You read exactly what is being asked, who is asking and why, and you approve with Face ID. The agent gets its answer and never holds a credential.

HOW IT WORKS
1. Pair once. Scan the code the Mac app shows. Your phone makes a key in the Secure Enclave, and that key is the whole account. No password, no sign-in.
2. The agent asks. A flagged call stops, and your phone gets the request: the tool, the arguments as they were written, who is asking, and how long it has left.
3. You read it. Approve signs the exact bytes you read, with a key that never leaves the enclave. Change one character and the signature no longer matches. Deny needs no face.
4. It goes back signed. The verdict returns to the agent as an ordinary tool result. Innkeeper attaches the credential, so the agent never holds it. Every call is written down.

WHAT THE PHONE HOLDS
The credentials you add live in your phone's keychain. A credential leaves the phone only when you approve a call that spends it, sealed to the one Mac that asked, for one use. The Mac holds nothing at rest.

AT HOME AND AWAY
On your own network the phone and the Mac talk directly, sealed to keys they agreed at pairing. Elsewhere, the same sealed envelopes travel through a relay that keeps no accounts and cannot read them. Push notifications arrive through Apple, saying only that an approval is waiting.

WHAT WE COLLECT
Nothing. No account, no email, no analytics, no tracking.

REQUIRES
The Innkeeper app for Mac, macOS 14 or later, free at innkeeper.a2w.io. One Mac and one phone is free, and stays free.


## Version history (last 1 release)

### 1.0 — 2026-09-11

No release notes.

## More apps by DENISLAV DENISLAVOV GAVRILOV

- [BaldCheck!](https://appshunter.io/ios/app/baldcheck/id6761391544)

All apps by DENISLAV DENISLAVOV GAVRILOV: https://appshunter.io/developer/1889295257

---

*Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-09-15.*