█████ ███
░░███ ░░░
░███ █████ ██████ ████ ████████ ██████
░███░░███ ░░░░░███ ░░███ ░░███░░███ ███░░███
░██████░ ███████ ░███ ░███ ░░░ ░███ ░███
░███░░███ ███░░███ ░███ ░███ ░███ ░███
████ █████░░████████ █████ █████ ░░██████
░░░░░ ░░░░░ ░░░░░░░░ ░░░░░ ░░░░░ ░░░░░░
Secure CLI for managing Claude Code API providers with age (X25519) encryption, multi-provider support, and audit logging.
# Install
curl -sSL https://raw.githubusercontent.com/dkmnx/kairo/main/scripts/install.sh | sh
# Setup
kairo setup
# Configure a provider
kairo config zai
# Test provider
kairo test zai
# Switch and query
kairo switch zai "Help me write a function"
# Or use default provider
kairo -- "Quick question"| Command | Description |
|---|---|
kairo setup |
Interactive setup wizard |
kairo config <provider> |
Configure a provider |
kairo list |
List configured providers |
kairo status |
Test all providers |
kairo test <provider> |
Test specific provider |
kairo switch <provider> |
Switch and exec Claude |
kairo default <provider> |
Get/set default provider |
kairo reset <provider|all> |
Remove provider config |
kairo rotate |
Rotate encryption key |
kairo audit <list|export> |
View/export audit logs |
kairo -- "query" |
Query mode (default provider) |
kairo version |
Show version info |
kairo update |
Check for updates |
| Feature | Description |
|---|---|
| Multi-Provider | Native Anthropic, Z.AI, MiniMax, Kimi, DeepSeek, custom |
| Secure Encryption | Age (X25519) encryption for all API keys |
| Key Rotation | Regenerate encryption keys periodically |
| Audit Logging | Track all configuration changes |
| Interactive Setup | Guided configuration wizard |
| Provider Testing | Test connectivity and configuration |
| Auto-Update | Notifications for new versions |
User Guides:
- User Guide - Installation and usage
- Audit Guide - Audit log usage
- Integration Examples - Practical workflows
Developer Resources:
- Development Guide - Setup and contribution
- Architecture - System design and diagrams
- Contributing - Contribution workflow
Reference:
- Troubleshooting - Common issues and solutions
- Changelog - Version history
kairo/
├── cmd/ # CLI commands (Cobra) → [cmd/README.md](cmd/README.md)
├── internal/ # Business logic
│ ├── audit/ # Audit logging
│ ├── config/ # Configuration loading
│ ├── crypto/ # Age encryption
│ ├── providers/ # Provider registry
│ ├── validate/ # Input validation
│ └── ui/ # Terminal output
└── pkg/ # Reusable utilities → [pkg/README.md](pkg/README.md)
Location: ~/.config/kairo/
| File | Purpose | Permissions |
|---|---|---|
config |
Provider configurations (YAML) | 0600 |
secrets.age |
Encrypted API keys | 0600 |
age.key |
Encryption private key | 0600 |
audit.log |
Configuration change history | 0600 |
make build # Build to dist/kairo
make test # Run tests with race detection
make lint # Run code quality checks
make format # Format code with gofmt- Age (X25519) encryption for all API keys
- 0600 permissions on sensitive files
- Secrets decrypted in-memory only
- Key generation on first run
- Use
kairo rotatefor periodic key rotation