Claude can sign, but never see. MCP server + CLI that keeps private keys out of the LLM's context window.