Auth Box v2.0.0

Auth Box v2.0.0 — Zero-Knowledge Password Manager + MCP Gateway

Highlights

• Zero-knowledge vault: BIP-39 seed phrase, deterministic password derivation, no server-side secrets
• MCP credential gateway: Policy-gated AI agent access with scope, rate limits, time windows, and step-up approval
• 70+ API key providers: OpenAI, Anthropic, AWS, Stripe, and more with health checks
• Hash-chain audit trail: Tamper-evident logging of all credential access
• Browser extension: Chrome/Firefox/Edge support for autofill and vault management

Architecture

• Go API server with PostgreSQL
• Next.js web console
• TypeScript MCP protocol package (@authbox/mcp-protocol)
• SRP-6a zero-knowledge authentication
• AES-GCM-256 envelope encryption

MCP Tools

• get_credential — Retrieve credentials filtered by agent access policy
• proxy_authenticated_request — Make authenticated HTTP requests without exposing secrets
• list_available_services — Discover available credential services