Claude Keychain stores your API keys in the macOS Keychain. Type them in once, and Claude Code can use them from then on, without the raw value being handed back to it. It lives in your menu bar.