Are passwords in my keychain readable by enterprises MDM tools?
You should not be installing work-issued MDM solutions on a personal computer, and you should not keep personal content on a work computer unless you are okay with IT management at the company accessing it. Assume they have the same permissions as an administrator account with screen sharing enabled.
To answer your question, your keychain is protected by your account login password in most cases. In the &quot;assume they have an administrator account&quot; scenario, that does not give them access. However, they probably also have your account password accessible if they use any sort of managed login system (my work requires enterprise passwords to be used for machine accounts) which would allow access.