Skip to content

Releases: IluvatarLabs/blinddrop

Release list

BlindDrop 0.3.0

BlindDrop 0.3.0 Latest
Latest

Choose a tag to compare

View all tags
@yuz207 yuz207 released this 14 Sep 17:59
v0.3.0
35f3179

BlindDrop is a local encrypted vault for the API keys your agents use. You unlock it in your terminal; it makes authenticated requests and returns the results without handing the client the provider key.

Install

Download blinddrop-0.3.0.tgz from this release. Requires Node.js 22.13+ on the 22.x line, or 23.5+, and npm.

On macOS or Linux:

npm install --global --prefix "$HOME/.local" ./blinddrop-0.3.0.tgz
export PATH="$HOME/.local/bin:$PATH"
blinddrop --help

The package contains the built command, guides and examples. Installation downloads its runtime dependencies; it does not create a vault or install a background service. BlindDrop is not published on npm; install the tarball by its local path.

Included

  • An encrypted local archive, hidden owner prompts, key replacement, backup by copy and passphrase changes.
  • Two MCP tools over stdio or authenticated local HTTP.
  • A run wrapper for configurable SDKs and HTTP clients, including streamed responses.
  • API-key placement, Basic, OAuth grants and PKCE onboarding, JWT bearer exchange, AWS SigV4 and mutual TLS.

Start with the README, then the client guide. The changelog records tested coverage and limits. Windows remains unverified.

The agent harness and OS must protect the owner/helper context, and configured providers must be trusted with their credentials. See Security.

PolyForm Noncommercial 1.0.0 (non-commercial use only), with retained third-party notices.

Assets 3
Loading