It’s a nip46 signer. Key stays in clave and clients request that clave sign on your behalf. So you can test out any number of Nostr clients without handing over your nsec to each of them.
https://github.com/DocNR/clave/blob/main/FAQ.md
https://clave.casa
