After the agent-tool breach, I asked: where do my API keys actually live?
A developer built keymap, a dependency-free local Python tool that scans the config files agent tools, CLIs and shells read — including ~/.claude.json, ~/.codex/config.toml, ~/.env, shell rc files and history, and ~/.aws…