KeyVault Studio vs Remote for OpenCode Agents

Azure Key Vault, without the portal: KeyVault Studio is the native client for Mac, iPhone and iPad. Your secrets, keys and certificates are well protected in Azure. Managing them just takes too many clicks in the portal. KeyVault Studio turns that into a real Apple app: fast, focused and secured with Face ID / Touch ID. Want to look around first? Demo mode opens the complete app with sample data, no Azure account needed. SECRETS ▸ Create, view, update and delete, every value behind Face ID / Touch ID ▸ Full version history with side-by-side comparison ▸ Content types for JSON, XML, connection strings and API keys ▸ The app warns before anything expires, with thresholds you choose ▸ Copied values clear themselves from the clipboard KEYS ▸ Create RSA, EC and HSM-backed keys ▸ Crypto Playground: encrypt, decrypt, sign, verify, wrap, unwrap ▸ Rotation policies and one-tap rotation ▸ Import from JSON Web Key CERTIFICATES ▸ Issue self-signed and CA-signed certificates ▸ Import PFX/P12 and PEM, export the public certificate or the private key ▸ Manage policies, issuers, contacts and pending operations NETWORKING ▸ Configure the vault firewall, VNet rules and private endpoints ▸ Manage private DNS zones, record sets and VNet links ▸ Approve or reject private endpoint connections VAULTS ▸ Find vaults across all your Subscriptions in seconds ▸ Create a new vault with a guided wizard ▸ Backup and restore, AES-GCM encrypted if you want ▸ Recover or purge soft-deleted vaults and items AI ASSISTANT ▸ Ask questions about your own infrastructure: what expires soon, what is disabled ▸ Runs fully on device if you want: Apple Intelligence or Gemma, no cloud required ▸ Or bring your own key: Claude, OpenAI, Gemini, plus Ollama on your own network ▸ Naming suggestions per Cloud Adoption Framework, subnet and address space planning ▸ The assistant sees names and metadata, never secret values ▸ A visible token budget keeps API costs under control BUILT FOR APPLE PLATFORMS ▸ Mac, iPhone and iPad with the same feature set, tuned per size class ▸ Lightning-fast search across every vault and item, right on the device ▸ Several accounts side by side: Azure Commercial, US Government and China clouds ▸ No middleman servers: the app talks directly to Azure with your Microsoft Entra ID sign-in Bring your own app registration or use the built-in one. Your secrets never leave your device except to Azure.

Run OpenCode on your Mac, then connect with this client from anywhere to get the full OpenCode harness. Remote for OpenCode connects your iPhone to the OpenCode coding agent running on your own Mac, so you can start work, watch it happen, and approve what it wants to do, from the sofa, the bus, or anywhere else. ZERO NETWORK SETUP No VPN, no port forwarding, no IP addresses to type. Your devices find each other through your own iCloud account and talk directly, end-to-end encrypted. There is no server in the middle because there is no server at all. YOUR CODE STAYS YOURS The agent runs on your Mac, against your repositories, using your model credentials, which never leave it. Nothing is collected, no analytics, no third-party SDKs. APPROVE FROM ANYWHERE When the agent wants to run a command, you see the exact command and decide. Risky actions look different from routine ones, so a destructive command never gets waved through out of habit. Face ID confirms it's you. PLAN MODE Switch the agent to Plan mode and it cannot edit anything at all, explore a codebase and get a plan back with a hard guarantee that nothing changed. REVIEW BEFORE YOU SIGN OFF See every accumulated change with per-file diffs, either against your last commit or against your default branch, the way a reviewer would. ALSO - Watch the agent think, live - Dictate prompts, transcribed on-device - Send screenshots and files as context - Run your own slash commands - Pick any model your OpenCode is configured with OPEN SOURCE The iPhone app, the Mac companion, and the protocol between them are public at github.com/tjameswilliams/remote-for-opencode under the PolyForm Noncommercial license. Every privacy claim on this page is something you can verify by reading the code instead of taking it on trust. REQUIRES a Mac running the free Remote for OpenCode companion and OpenCode. Get the companion at https://remoteforopencode.com. Not affiliated with, endorsed by, or sponsored by the OpenCode project.