Vault Secure
Primary store: IndexedDB (coffee-keyvault). A JSON mirror coffee_vault_keys and legacy per-app keys keep older Coffee surfaces compatible. Nothing is sent to our servers from this page.
Ecosystem Sync
Import ../coffee-key-vault.js or use window.CoffeeKeyVault. Hub links here as the single place to paste PATs and API keys.
Active Credentials
Presets load from coffee-keys.json next to this page — edit that file to add or reorder key cards.
Connect AI + socials
Gemini: add an AI Studio key in the cards below for browser-direct KIP. Mastodon: use Connect Mastodon and the instance field (mastodon_token). (Google KIP OAuth is hidden while the client flow is unstable — use API key, or re-enable the row in HTML.)
VM Agent host (KIP Agent mode · Deep Search)
Keys in this vault are for the browser. The machine running COFFEE_VM/vm-agent needs its own Google auth — not pasted here:
gcloud auth application-default loginonce on that host, orexport GEMINI_API_KEY='…'(orGOOGLE_API_KEY) beforenode server.js
Paste the agent tunnel URL in Public URL (Agent) below so apps can reach your host. Walkthrough: COFFEE-ENGINE/COFFEE-GCLOUDMETHOD.md §16.