Arlopass

About Arlopass

Arlopass is an open-source browser extension and developer SDK that lets web apps use your AI providers without ever handling your API keys. You approve each request and choose the model; credentials remain on your device and are stored in the OS keychain.

Review

Arlopass addresses a common pain point: apps asking for API keys and developers building server-side proxies to protect them. Its extension-plus-SDK approach offers a clear pattern for giving web apps access to a user's chosen providers while keeping control and privacy in the user's hands.

Key Features

• Browser extension and developer SDK that routes AI requests through a local bridge so apps never see your API keys.
• User approval flow for each request and the ability to pick the model for a given request.
• Support for multiple providers, including cloud services and local models (Ollama, Claude, GPT, Bedrock), plus CLI adapters.
• Developer-focused API (TypeScript-first): simple calls like connect(), chat.send(), chat.stream() and a short integration surface (advertised as ~10 lines to add AI).
• Fully open source (MIT), no accounts and no telemetry reported.

Pricing and Value

Arlopass is offered free and open source under an MIT license, so there are no licensing fees to start using it. The main value proposition is cost and operational savings for developers who would otherwise need server proxies and for users who want to avoid sharing credentials with many apps. That said, value depends on adoption: web apps must opt to support the extension and users need to install and connect their providers.

Pros

• Strong privacy posture: keys stay in the OS keychain and requests require user approval.
• Simplifies developer work by removing the need for server-side API key management and proxies.
• Supports local model workflows and a variety of providers, which can reduce cloud usage and costs.
• Open-source, MIT-licensed, and reportedly no telemetry or account requirements.

Cons

• Relies on users installing a browser extension and configuring providers, which can be a friction point for some audiences.
• CLI and local-provider flows may be slower or require additional setup compared with direct cloud APIs.
• Adoption by third-party web apps is required for broad usefulness; limited support will reduce impact until more apps integrate the SDK.

Overall, Arlopass is a practical option for developers and users who prioritize privacy and want to avoid sharing API keys with many web applications. It fits particularly well for open-source web apps, teams wanting internal policy control, and individuals who run local models or prefer to pick their own providers per request.

Open 'Arlopass' Website