Kairo

 █████                 ███
░░███                 ░░░
 ░███ █████  ██████   ████  ████████   ██████
 ░███░░███  ░░░░░███ ░░███ ░░███░░███ ███░░███
 ░██████░    ███████  ░███  ░███ ░░░ ░███ ░███
 ░███░░███  ███░░███  ░███  ░███     ░███ ░███
 ████ █████░░████████ █████ █████    ░░██████
░░░░░ ░░░░░  ░░░░░░░░ ░░░░░ ░░░░░     ░░░░░░

Go CLI wrapper for Claude Code and Qwen Code with X25519-encrypted API keys.

Overview

Kairo provides multi-provider API management with secure credential storage:

• Multi-harness: Claude Code and Qwen Code
• Secure encryption: age/X25519 for all API keys at rest
• Built-in providers: Z.AI, MiniMax, Kimi, DeepSeek, and custom providers
• Cross-platform: Linux, macOS, Windows

Quick Start

Install

• Linux/macOS: curl -sSL https://raw.githubusercontent.com/dkmnx/kairo/main/scripts/install.sh | sh
• Windows: irm https://raw.githubusercontent.com/dkmnx/kairo/main/scripts/install.ps1 | iex

Prerequisites

Install one of the supported harness CLIs:

# Claude Code
npm install -g @anthropic-ai/claude-code

# Qwen Code
npm install -g @qwen-code/qwen-code@latest

Setup

kairo setup          # Interactive setup wizard
kairo list           # List configured providers
kairo zai "query"    # Use a specific provider
kairo -- "query"     # Use the default provider

Commands

Command	Description
kairo setup	Interactive setup wizard
kairo setup --reset-secrets	Regenerate encryption key and re-enter API keys
kairo list	List configured providers
kairo default [provider]	Get or set the default provider
kairo delete <provider>	Delete a provider
kairo <provider> [args]	Execute with a specific provider
kairo -- [args]	Execute with the default provider
kairo harness get	Get the current harness
kairo harness set <name>	Set the default harness
kairo update	Update to the latest version
kairo version	Show version information

Full reference: docs/reference/configuration.md

Configuration

Locations:

• Linux/macOS: ~/.config/kairo/
• Windows: %USERPROFILE%\AppData\Roaming\kairo\

Files:

• config.yaml - provider and harness settings
• secrets.age - encrypted API keys
• age.key - encryption private key

Security

• X25519 encryption for all API keys
• 0600 permissions on sensitive files
• In-memory decryption during use
• Temporary wrapper scripts for secure token passing to harness CLIs
• Recovery/reset flow via kairo setup --reset-secrets

See Security Architecture

Documentation

• User Guide - Installation and usage
• Development Guide - Setup and contribution
• Architecture - System design
• Troubleshooting - Common issues

Full documentation: docs/README.md

Development

just build
just test
just lint
just pre-release

Resources

• GitHub
• Report Issues

---

License: MIT | Author: dkmnx