Auth Box v2.0.0

Auth Box v2.0.0 — Zero-Knowledge Password Manager + MCP Gateway

Highlights

• Zero-knowledge vault: BIP-39 seed phrase, deterministic password derivation, no server-side secrets
• MCP credential gateway: Policy-gated AI agent access with scope, rate limits, time windows, and step-up approval
• 70+ API key providers: OpenAI, Anthropic, AWS, Stripe, and more with health checks
• Hash-chain audit trail: Tamper-evident logging of all credential access
• Browser extension: Chrome/Firefox/Edge support for autofill and vault management

Architecture

• Go API server with PostgreSQL
• Next.js web console
• TypeScript MCP protocol package (@authbox/mcp-protocol)
• SRP-6a zero-knowledge authentication
• AES-GCM-256 envelope encryption

MCP Tools

• get_credential — Retrieve credentials filtered by agent access policy
• proxy_authenticated_request — Make authenticated HTTP requests without exposing secrets
• list_available_services — Discover available credential services

Auth Box v3.0-beta — Unstoppable Edition

Your Keys. Your Identity. Unstoppable.

The password manager that works even if we disappear.

Highlights

• Seed Phrase Sovereignty: 24-word BIP-39 recovery phrase. No email, no account.
• Deterministic Passwords: seed + site = password. Vault can be empty.
• Vault Onyx Design System: Dark mode, 6-tier tonal layering, glassmorphism.
• 13-Source Import: Apple, Google, Chrome, Firefox, 1Password, Bitwarden, and more.
• AI Agent Gateway: MCP protocol with policy engine and audit chain.
• 27 Tests Passing: 6 SRP + 21 Seed. 15+34 pages, 0 errors.

MIT Licensed. Open source.

UI/UX Optimization · 2026-02-18

Release Note · UI/UX Optimization

• release_scope: frontend-ui-ux-optimization
• run_id: 20260218T042527Z
• release_commit: 7b00ec6
• release_date_utc: 2026-02-18T05:52:00Z

Included Changes

• Home information hierarchy refactor with single primary CTA (Start onboarding).
• Global UI rhythm polish for home sections and CTA semantics (cta-primary, cta-link).
• Marketing page onboarding CTA aligned to primary button style.
• PDCA/docs updates and audit evidence bundle under outputs/frontend-ui-ux-optimization/20260218T042527Z.

Verification

• frontend audit (post): network/console/performance PASS.
• visual regression: expected changed routes asserted PASS.
• UX Map Round 2: PASS, including primary_cta_count_home=1.
• ai check: PASS (--no-sbom, after docs).

Evidence Index

• reports/frontend_audit/post/frontend_audit_assertion.txt
• reports/frontend_audit/post/visual_regression_assertion.txt
• reports/uxmap_round2/uxmap_round2_assertion.txt
• logs/ai_check_after_docs.log
• reports/three_end_consistency.txt

Constraints

• three-end consistency: local/GitHub PASS; VPS is N/A in this workspace (no reachable VPS target configured).