Product upvotes vs the next 3

Waiting for data. Loading

Product comments vs the next 3

Waiting for data. Loading

Product upvote speed vs the next 3

Waiting for data. Loading

Product upvotes and comments

Waiting for data. Loading

Product vs the next 3

Loading

Arlopass

AI wallet that lets web apps use your models, not your keys

Arlopass is an open-source browser extension and developer SDK that lets any web app use your AI providers — Ollama, Claude, GPT, Bedrock — without ever touching your API keys. You approve each request. You pick the model. Your credentials never leave your device.

Top comment

Hey Product Hunt! 👋 Arlopass is your personal AI pass — a browser extension that lets any web app use your AI providers without ever seeing your API keys. Here's the problem: every web app with AI features asks you to paste an API key and trust that they won't log it, leak it, or lose it in a breach. Developers burn days building server-side proxies just to keep keys safe. Users get locked into whatever model the app chose. It's a bad architecture that's become the default. So we built Arlopass. Install the extension, connect your providers (Ollama, Claude, GPT, Bedrock — whatever you use), and now every supported web app can request AI through your pass. You see the request, pick the model, approve it, and the request routes through a local bridge on your machine. Keys stay in your OS keychain. The app gets intelligence. You keep sovereignty. For developers — it's 10 lines to add AI to your app. connect(), chat.send(), chat.stream(). No API key management. No server proxy. No .env files. TypeScript-first, async iterators, Stripe-level DX. For privacy folks — it works with fully local models (Ollama, LM Studio). Zero cloud. Zero exposure. Everything stays on your machine. What's next: We're building React hooks (useChat, useProvider), more community adapters, and working toward a v1.0 protocol spec. We'd love contributors — the adapter contract is a single TypeScript file. Fully open source. MIT licensed. No accounts. No telemetry. Would love to hear how you're handling AI credentials in your apps today — and what providers you'd want us to support next. Happy to answer any questions!