The Problem
47 API keys, scattered everywhere.
Every team has the same chaos: secrets in Slack DMs, sticky notes, and .env files nobody dares to touch. The last "rotation" was copying a key from a coworker who left six months ago. New devs ask "where's the .env?" on day one.
MeowPass replaces the chaos with a single encrypted vault, every secret, every project, every teammate, one source of truth, and does it without the server ever seeing a plaintext value.
Architecture
Zero-knowledge by design.
Your master password derives the encryption key on your device with Argon2id. Secrets are sealed with AES-256-GCM before they ever leave your machine. The server only ever stores ciphertext, even a full database leak yields meaningless bytes.
{{ a.step }}
{{ a.title }}
{{ a.desc }}
Sharing
Team vaults use X25519 key exchange per member, no raw keys are ever shared, and a single mp rotate re-encrypts everything.
Features
Secrets managed everywhere you code.
{{ f.cmd }}
{{ f.title }}
{{ f.desc }}
Install & CLI
Up and running in two minutes.
Homebrew
brew install meowrithm/tap/meowpass
npm (MCP server)
npx @meowlabs/meowpass-mcp
Tech Stack
Built to be fast and auditable.
{{ s.label }}
{{ s.value }}
Roadmap
Where it's heading.
{{ r.tag }}
{{ r.text }}