# Install keepkey-agent with Homebrew

Keepkey Hardware-based SSH/GPG agent. Version 0.9.0 via Homebrew; verified 2026-08-02.

## Install

```sh
sudo av install brew:keepkey-agent
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install keepkey-agent
```

  Evidence: local Homebrew formula metadata

## Package facts

- **Package key:** brew:keepkey-agent
- **Package manager:** Homebrew
- **Version:** 0.9.0
- **Source summary:** Keepkey Hardware-based SSH/GPG agent
- **Homepage:** <https://github.com/romanz/trezor-agent>
- **Last updated:** 2026-08-02T01:26:52+09:00
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- keepkey-agent (alias)
- keepkey_agent.py (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 0.9.0
## Project history and usage

keepkey-agent is a KeepKey-focused package in the romanz/trezor-agent hardware-agent family. The broader project lets hardware security devices operate SSH, GPG, and age keys so private key material is generated and kept on the device instead of on the host computer.

### Project history

The upstream trezor-agent repository was created on GitHub on 2015-06-06. Its README describes a shared libagent library plus device-specific agents for hardware-backed SSH, GPG, and age workflows. The keepkey_agent package appeared as a small Python package with version 0.9.0 on PyPI and was packaged by Homebrew as keepkey-agent.

### Adoption history

Evidence for keepkey-agent itself is thin compared with trezor-agent. Its adoption signal is mainly package-manager availability through PyPI and Homebrew rather than a large standalone project identity.

### How it is used

Users install the CLI to derive and use SSH/GPG identities from a KeepKey-style hardware wallet, fitting the same workflow as trezor-agent: signing commits or mail, authenticating SSH sessions, and avoiding exported long-lived private keys on disk.

### Why package nerds care

The package is interesting because it sits at the overlap of cryptocurrency hardware wallets and Unix authentication tooling. For package collectors, it is a narrow example of reusing wallet hardware as a general-purpose agent rather than only as a coin-signing device.

### Timeline

- 2015-06-06: romanz/trezor-agent repository created on GitHub.
- 2016: Trezor firmware posts linked from the upstream README documented SSH login and GPG-related hardware-wallet workflows.
- 0.9.0: keepkey_agent published on PyPI as a KeepKey SSH/GPG agent package.
- 2026-07-01: Homebrew formula metadata listed keepkey-agent 0.9.0.

### Related projects

- trezor-agent is the parent project and Trezor-specific CLI.
- libagent is the shared library in the upstream repository.
- onlykey-agent and jade_agent are sibling hardware-agent integrations named by the upstream README.

### Sources

- <https://formulae.brew.sh/api/formula/keepkey-agent.json>
- <https://github.com/romanz/trezor-agent>
- <https://pypi.org/pypi/keepkey-agent/json>
- <https://raw.githubusercontent.com/romanz/trezor-agent/master/README.md>


## Security Notes

broad file, network, media, or database tool signal.

- **Geiger risk:** blue / medium
- broad file, network, media, or database tool signal


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.ssh/agent.config

## Combined YAML source

View the package source record on GitHub. [combined/keepkey-agent.yml](https://github.com/mxcl/pkgdb/blob/main/combined/keepkey-agent.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph