Keys and privacy

Bring your own keys

Use your own provider accounts. Oort sends each request straight from your machine to the provider, and nothing reaches us.

The three keys

Provider	Used for	Get a key
Voyage AI `voyage`	Finding memories by meaning, and ranking them.	docs.voyageai.com
TypeSafe `typesafe`	Deciding whether and how to keep a fact.	typesafe.ai
Anthropic `anthropic`	Writing the short memory (Claude Haiku).	platform.claude.com

Store them

Create a key at each provider.
Use the links in the table above.
2
Store the Voyage AI key.
Terminal
```
$ oort keys set voyage
```
The macOS Keychain asks for the key and hides what you type. It never lands in your shell history.
3
Store the TypeSafe key.
Terminal
```
$ oort keys set typesafe
```
4
Store the Anthropic key.
Terminal
```
$ oort keys set anthropic
```
5
Check all three.
Terminal
```
$ oort keys list
```
This shows where each key comes from: keychain, env or missing. It never prints a key.
Restart your agents.
The Oort server reads its keys when it starts.

Environment variables

Oort also reads VOYAGE_API_KEY, TYPESAFE_API_KEY and ANTHROPIC_API_KEY. A set variable wins over the Keychain. The Keychain is macOS only for now, so use these on other systems. Keep the Anthropic one out of your shell profile there too.

To make Oort ignore the Keychain, set OORT_NO_KEYCHAIN=1.

Remove a key

Terminal

$ oort keys rm voyage

Without keys

Recall still works, matching on words only. Saving new memories needs all three keys, or Oort Pro.