passwd-page: zero-knowledge secret sharing for AI agents
passwd-page, from Davidfeldi, is a zero-knowledge secret sharing platform that keeps credentials out of AI prompt contexts. The app functions as an MCP server and exposes operations such as share_secret, share_file, and retrieve_secret so agents can access secrets at runtime without plaintext injection. It uses client-side AES-256-GCM encryption and URL-fragment key storage for privacy. Aimed at developers and security engineers, it supports web, CLI, and agent workflows for ephemeral credential and configuration delivery.
What tasks can you actually use it for?
passwd-page focuses on ephemeral secret delivery to both humans and agents. The platform provides MCP tool endpoints like share_secret, share_file, and retrieve_secret, and supports agent-to-human and agent-to-agent handoffs. File sharing accepts uploads up to 1MB, suitable for small configuration files or .env snippets. Use cases include delivering API keys, database credentials, and short-lived configuration artifacts to an agent at runtime.
How secure is the stored data and how is it handled?
The tool uses client-side AES-256-GCM encryption so the server stores only encrypted payloads or "noise." Decryption keys are kept in the URL fragment, which is never sent to the server according to the HTTP specification, and secrets can be destroyed immediately after a single read or expire via a TTL between 5 minutes and 30 days. These choices create a zero-knowledge flow where the server cannot decrypt stored items.
Is it practical to integrate into existing agent workflows?
Integration options include a browser interface, a CLI installable via Homebrew, and an MCP server compatible with agent hosts such as Claude Desktop. No signup is required, enabling quick sharing. Agents retrieve secrets at runtime through the tool execution environment rather than by injecting plaintext into prompts, which changes how credentials are delivered but requires an MCP-capable host and correct runtime tooling to call the server endpoints.
Practical for teams that accept host requirements and operational discipline
passwd-page benefits from a privacy-first, open-source orientation and is well-regarded in developer circles, making it a practical choice for teams embedding ephemeral secrets into agent workflows. Adoption depends on available MCP host support and disciplined key handling in agent runtimes. Teams that can meet those deployment prerequisites gain a focused method for delivering short-lived credentials to humans and machines.
