# trezor-agent mit Homebrew, Nix installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für trezor-agent in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:trezor-agent ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install trezor-agent ``` Evidenz: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#trezor-agent ``` Evidenz: nixpkgs package indexes: trezor-agent from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix ## Paketfakten - **Paketschlüssel:** brew:trezor-agent - **Paketmanager:** Homebrew - **Version:** 0.13.0 - **Quellzusammenfassung:** Hardware SSH/GPG agent for Trezor and Ledger - **Homepage:** - **Zuletzt aktualisiert:** 2026-05-15T11:13:55Z - **Generiert:** 2026-08-03T19:37:03+00:00 ## Executables - age-plugin-trezor (Alias) - trezor-agent (Alias) - trezor-gpg (Alias) - trezor-gpg-agent (Alias) - trezor-signify (Alias) - trezor_agent.py (Alias) ## Installationsverhalten - Bottle: nicht verfügbar ## Version und Aktualität - Seite generiert: 2026-08-03 - Manager-Version: 0.13.0 ## Projektgeschichte und Nutzung trezor-agent is a hardware-backed SSH, GPG, and age agent that grew out of early Trezor firmware support for using a hardware wallet as an identity and signing device. In package-manager culture it sits in the security-tools niche: a small CLI package that lets developers keep authentication and signing keys on a hardware device while still using familiar Unix tools. ### Projektgeschichte Trezor firmware 1.3.4, announced in September 2015, credited Roman Zeyde's work and introduced NIST P-256 support so a Trezor could be used for SSH login. The official instructions in that announcement installed `trezor_agent`, generated a public key with `trezor-agent`, and used the result in `authorized_keys`. Firmware 1.3.6 extended the same idea beyond SSH by adding GPG key generation for signing email or documents and by pointing users to Trezor Agent for the user-space tooling. The repository later generalized the model into a shared `libagent` plus device-specific agents for Trezor, Blockstream Jade, and OnlyKey. ### Adoptionsgeschichte The project was adopted by users who wanted hardware-backed developer identity without changing their normal SSH, Git, GPG, or password-store workflows. Its README lists signing email, Git commits, and software packages, managing passwords with `pass` or `passage`, and authenticating web tunnels and file transfers as representative uses. Package-manager availability through Homebrew and Nix made it installable in the same way as other command-line security tools, which mattered because trezor-agent is usually used from shells, SSH subprocesses, Git commands, GPG, and systemd user units rather than as a standalone application. ### Wie es verwendet wird For SSH, users derive a public key from an identity string, add that public key to remote access controls, and run commands or shells with `SSH_AUTH_SOCK` pointed at the agent. The official SSH guide also documents Git and Mercurial repository access, Git commit signing through SSH signatures, and optional systemd socket activation. For GPG, users initialize a dedicated `GNUPGHOME` such as `~/.gnupg/trezor`, then continue using normal GPG-aware software while the agent asks the hardware device to sign or decrypt. The GPG guide covers commit and tag signing, password-store integration, file signing/decryption, and email use. ### Warum Paket-Nerds sich dafür interessieren trezor-agent is interesting to package nerds because it turns a cryptocurrency hardware wallet into a Unix authentication primitive. It bridges hardware-wallet APIs into the ecosystem of `ssh-agent`, GnuPG, Git signing, `pass`, systemd user sockets, and age plugins. The package is also a good example of Homebrew packaging for a tool whose value is not a daemon or GUI, but a collection of small executables that plug into existing developer workflows: `trezor-agent`, `trezor-gpg`, `trezor-gpg-agent`, `trezor-signify`, and `age-plugin-trezor`. ### Zeitleiste - 2015: Trezor firmware 1.3.4 announcement documents SSH login with `trezor-agent`. - 2016: Trezor firmware 1.3.6 announcement adds GPG signing support and references Trezor Agent. - 2022: Official SSH guide documents Git commit signing with SSH signatures. - 2026: GitHub repository lists `libagent/0.16.1` as the latest release on March 1, 2026. ### Related projects - Related components include `libagent`, `jade_agent`, `onlykey-agent`, GnuPG, OpenSSH, age, pass, and Trezor firmware features for SSH/GPG operations. ### Quellen - - - - - ## Sicherheitshinweise Für trezor-agent wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.ssh/agent.conf, ~/.gnupg/trezor ## Andere Paketmanager-Einträge - Nix - trezor-agent: normalized package name match | nixpkgs package indexes: trezor-agent from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix ## Combined YAML source View the package source record on GitHub. [combined/trezor-agent.yml](https://github.com/mxcl/pkgdb/blob/main/combined/trezor-agent.yml) ## Quellen - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph