Blankey 0.2.7

• Personal data stays out of the assistant's view: when it reads a Word file or a PDF from your folders or one you
  share, names, ID numbers (EGN, LNCh, EIK, IBAN and others), addresses, phones and emails come through masked with
  their shape kept, like Xxxx Xxxxxx or ##########, and are blacked out on page images. The assistant still makes
  templates from them; the values are filled in only on your computer.
• Personal data… on a file under Templates, Folders, and the same review when the assistant asks for a file, shows
  what stays hidden. Select text to hide it too, step through a value's places, make a value visible to the assistant,
  or remove it from the list as not personal. Your corrections are kept per file, encrypted in the vault.
• A file you choose for the assistant is shared only after you review it (Choose file…, then Share).
• The window, the menu bar icon and the MCP server no longer wait for a keychain prompt at startup; the vault unlocks
  when you allow access.

Blankey 0.2.6

• Automatic updates: Blankey looks for a new version shortly after launch and every six hours. On macOS and Windows it
  downloads the update in the background and offers "Restart to update" in the menu and on the Connections page; the
  restart locks the vault. Linux packages say a new version is out and link to its release. Turn the checks off on the
  Connections page (Updates); Check now works either way.
• On macOS the first launch after an update may ask for keychain access again before Touch ID unlock works, as after a
  manual reinstall: the app is signed ad hoc, so each build has a new signature.
• check_bindings checks real values only for plain {{ role.key }} bindings and never evaluates computed expressions
  on vault data; it no longer reports fit ratios or missing glyphs.
• Agents on Blankey Online (claude.ai) ask before reading a file from your template folders: request_file with
  source: "lib:<id>" shows the file, and you allow it. Local agents read them directly as before.
• The fill window's preview no longer shows large boxes over blanks that have no value yet.

Blankey 0.2.5

• Template bindings written as plain text (buyer.name instead of {{ buyer.name }}) are refused when a template is
  saved, and check_bindings reports existing ones as literal instead of ok.
• request_fill refuses to open the fill form while a variable would start from a template default that gives no vault
  value, and lists the profile keys to map in paths; allow_defaults: true opens it anyway. The MCP instructions and
  the collection link's next step tell the assistant to map every variable to a profile key before filling.

Blankey 0.2.4

• macOS no longer calls a downloaded Blankey damaged: the whole app is signed (ad hoc), so macOS asks once to open an
  app from an unverified developer (System Settings, Privacy & Security, Open Anyway).
• The window no longer stays white while macOS asks for keychain access during quick unlock.

Blankey 0.2.3

• Anonymous usage statistics: a minute after launch and then every hour, Blankey posts to the official relay how
  many profiles and templates it holds and, by month, how many documents it generated, templates and fill sets it
  saved and profiles it created, with its version, platform and a random install id. Nothing about the documents,
  profiles or templates themselves is sent. Turn it off on the Connections page (Statistics).
• Signed in to Blankey Online, the app reports the same monthly numbers for the device after each connect and every
  hour.

Blankey 0.2.2

• Collection links can be deleted: the link stops working and goes away with whatever it received that was not saved; saved values and kept files stay. The links table shows one line per link; the fields, the full link and Copy are in the panel beside it. Small files show in KB.
• The Blankey Online account sits on its own line above the MCP status, with the full email; hovering it shows the connection's state.

Blankey 0.2.1

The first installers of the 0.2 line (the 0.2.0 macOS build failed in CI).

• Agents are told where collection link answers go: once you save a submission into a profile, they fill documents from that profile (describe_profile, request_fill) and never ask you to paste the values into the chat. list_collection_links adds saved_into (profile ids) and next, the next step in plain words.

From 0.2.0:

• Collection links (Vault → Collection links): a short link to a web form on the relay where someone else types the fields of a profile and attaches files, up to 50 MB each. What they send is encrypted in their browser to this computer and arrives even while Blankey is locked or offline. Review it on Activity or beside the link, save it into a profile, and open or export its files; it stays until you discard it. Kept files are encrypted in the vault and listed on Documents. Filter links by what waits for review, and search them.
• Agents can draft collection links (create_collection_link, confirmed in the app) and list them (list_collection_links); they never see what was sent.
• Signing in to a relay asks for its device_resource, for relays that keep the app's tokens apart from agents'.
• Every mcp-* header is forwarded to the MCP server, so MCP 2026-07-28 clients such as ChatGPT can connect through a relay.
• The vault moves to schema 7. Blankey 0.1.0 cannot open a vault that 0.2.x has opened.

Blankey 0.2.0

• Collection links (Vault → Collection links): a short link to a web form on the relay where someone else types the fields of a profile and attaches files, up to 50 MB each. What they send is encrypted in their browser to this computer and arrives even while Blankey is locked or offline. Review it on Activity or beside the link, save it into a profile, and open or export its files; it stays until you discard it. Kept files are encrypted in the vault and listed on Documents. Filter links by what waits for review, and search them.
• Agents can draft collection links (create_collection_link, confirmed in the app) and list them (list_collection_links); they never see what was sent.
• Signing in to a relay asks for its device_resource, for relays that keep the app's tokens apart from agents'.
• Every mcp-* header is forwarded to the MCP server, so MCP 2026-07-28 clients such as ChatGPT can connect through a relay.
• The vault moves to schema 7. Blankey 0.1.0 cannot open a vault that 0.2.0 has opened.

Blankey 0.1.0

First release.

• Encrypted vault: AES-GCM per field, Argon2id password, recovery key, optional Touch ID unlock
• Templates from Word documents, fillable PDFs and Typst
• Fill sets: every blank mapped to a vault field, a typed value or a default, with a live document preview
• MCP server over HTTP for Claude Code, Codex and others; stdio bridge for Claude Desktop
• Tray app for macOS, Windows and Linux