v1.14.1WebsiteLatest
Redesigned Account Emails
Verification, password reset and sign-up emails have a new, cleaner layout that follows your mail app's light or dark theme.
Changelog
RSSRecent updates, release notes, and version history across ApiVault products.
v1.14.0Website
Generated Avatars for New Accounts and Projects
New accounts and projects get a generated avatar instead of a plain initial, and a button on the avatar in settings swaps it for another.
v1.13.5Website
Long Project Names Stay in Their Card
On small screens, a long linked project or Worker name is cut short instead of running past its card.
v1.13.4Website
Tidier Integration Cards
A linked project's sync status is now a dot on its avatar, and connection headers drop the project count the list already shows.
v1.13.3Website
Clearer Cloudflare Link Loading
The Cloudflare mapping grid now shows it is loading, and the note under a linked Worker lines up with the card.
v1.13.2Website
Reapproving Connected Cloudflare Accounts
Approving Cloudflare accounts that are already connected no longer changes your connections.
v1.13.1Website
Connecting More Cloudflare Accounts
Connecting another Cloudflare account with the same login now adds it next to your existing connection instead of replacing it.
v1.13.0Website
Cloudflare Workers Integration
Connect Cloudflare and keep a Worker's secrets, Previews secrets and build variables in step with your project's keys, with the same previews, retries and strict ownership as Vercel and Supabase.
v1.12.23Website
Loading Skeletons That Match Each Page
Every account and project page now loads with a placeholder shaped like the page itself, so content no longer jumps into place when it arrives.
v1.12.22Website
Leave Projects from Settings
Project Settings now has a Leave Project section, so you no longer have to find yourself in the Members list to leave.
v1.12.21Website
Quieter Vault Key Actions
The custom vault key dialog no longer stacks Generate and Copy as extra buttons on the field label.
v1.12.20Website
Consistent Page Headers and Notices
Vault Encryption and Integrations now draw their headers, notices and key fields from the same shared components.
v1.12.19Website
Environment Picker
The environment choice in the Save Key dialog matches the Single / Bulk toggle.
v1.12.18Website
Consistent Dialogs
Every dialog now shares the same spacing, error style, buttons and mobile layout.
v1.12.17Website
Simpler Vault Encryption Settings
The Vault Encryption page is now a short list of settings, led by a single Use your own vault key switch.
v1.12.16Website
Slug Change Redirect Fix
Changing a project's slug now keeps you on that project's settings page instead of sending you to a broken /user/... URL.
v1.12.15Website
Cleaner Notification Rows
Notification icons and titles line up in every row, and unread notifications are easier to spot.
v1.12.14Website
Username Suggestion on Sign Up
The sign-up form keeps the suggested username in step with the full name as you type.
v1.12.13Website
Integration Logos in Logs
Automatic integration entries in the logs show the Vercel or Supabase logo instead of the service-token key icon.
v1.12.12Website
Collapsible Sidebar
The sidebar can now be hidden on desktop to give pages the full width, and it stays hidden until you bring it back.
v1.7.2CLILatest
Integration Log Source
`apivault logs --source` documents the service and integration sources.
v1.12.11Website
Integration Log Source
Work an integration runs on its own now has its own Integration source in the audit log, separate from service tokens.
v1.12.10Website
Readable Integration Log Details
Integration entries in the log details panel now read as plain labels instead of raw fields.
v1.12.9Website
Integration Log Filters
Audit logs can be filtered by Vercel or Supabase, each integration event has its own checkbox, and PATCH requests can be filtered by method.
v1.12.8Website
Clearer Supabase Mapping
Supabase links now show which ApiVault environment they sync and where it goes, as two labeled cells.
v1.12.7Website
Integration Edge Cases
Unlinking a Vercel project after Vercel revokes access no longer waits for a retry that can't happen, and keys saved without an environment now reach Vercel.
v1.12.6Website
Easier Project Linking
Linking a project before it has any keys now shows its environments, and the Vercel project picker points to where you choose which projects ApiVault can see.
v1.12.5Website
Vercel Teams Shared Across Projects
Several ApiVault projects connected to the same Vercel team no longer delete each other's variables or uninstall ApiVault for each other.
v1.12.4Website
Supabase Disconnect Keeps Other Projects Connected
Disconnecting Supabase from one ApiVault project no longer cuts off other projects connected to the same Supabase organization.
v1.12.3Website
Disconnect After Lost Access
Disconnecting Vercel or Supabase after the platform stopped accepting ApiVault now offers Remove anyway instead of waiting on a cleanup that can't run.
v1.12.2Website
Supabase Organization and Project Icons
Supabase organizations and linked projects on the Integrations page have their own icons instead of the Supabase logo.
v1.12.1Website
Accurate Sync Messages
Sync errors for Vercel and Supabase only say a sync will retry when one will, and opening a sync preview records a single entry in the audit log.
v1.12.0Website
Supabase Integration
Push a project's keys into Supabase Edge Function secrets: connect an organization, link its projects, choose the environment each one receives, and ApiVault keeps them in sync.
v1.11.0Website
A Redesigned Integrations Page
The Integrations page has a new look: a provider catalog, a separate page for Vercel connections, richer project cards and clearer link, sync and details dialogs.
v1.7.1CLI
Service Tokens That Work Unattended
Fixes found running the CLI under a service token in CI: `run` and `env export` follow the token's environment pin, and no command hangs on a prompt when there is no terminal.
v1.10.2Website
Back to ApiVault After Connecting Vercel
Connecting Vercel now returns you to the project's Integrations page instead of leaving you on Vercel.
v1.10.1Website
Unlinking After a Vercel Uninstall
When ApiVault is removed on Vercel's side, unlinking its projects now just clears the link, because Vercel has already deleted the variables ApiVault created.
v1.10.0Website
Vercel Integration
Connect a project to Vercel and ApiVault keeps its environment variables in sync with your keys — automatically on every change, or on demand with a preview.
v1.9.0Website
Landing Page FAQ and Accurate Security Copy
The homepage now answers the questions developers ask before trusting a vault and describes encryption the way it actually works.
v1.8.2Website
Rich Link Previews for Changelog and Docs
Links to a release or a docs page now unfurl on X, Discord, and Slack with a card showing the page's own title, summary, and date.
v1.8.1Website
Service Colors Match Their Logos
Service badge colors now come from each service's own logo and stay readable in both light and dark themes.
v1.8.0Website
Service Logos & Auto-Detection
Keys now carry their service's brand logo, and the dashboard picks the service for you as you type a key's name or paste its secret.
v1.7.7Website
Icons for Any MCP Client
MCP clients without a built-in icon now get a real logo on the consent screen and in MCP settings, looked up from the client's registration details.
v1.7.6Website
Switch Projects from the No Access Screen
The screen for a project you can't open now shows your project switcher in the header, so you can jump straight to one of your own projects.
v1.7.5Website
Mistyped Settings and Docs URLs Get a Proper Not-Found Page
Addresses like /settings/test and /docs/getting-starteds now show the site's not-found page with a real 404 status, instead of a project access message or a blank “Not Found”.
v1.7.4Website
Logs Load Once After a Refresh
Refreshing a project's Logs page no longer flickers between the loading skeleton and your logs several times before it settles.
v1.7.3Website
Reserved Usernames Hold on Every Sign-Up Path
Accounts whose username is filled in for you — Google sign-in, or registering without choosing one — can no longer end up named docs or dashboard, which made their own projects unreachable.
v1.7.2Website
Dashboard Section Links Go Where They Say
Links such as /dashboard/logs now open that section of your active project instead of an error screen.
v1.7.1Website
Service Tokens Page Restyled
The Service Tokens page and its create dialog are now built from the same components as the rest of the dashboard, which also fixes the rounded corners and panel backgrounds that were missing from them.
v1.7.0Website
Service Tokens for CI/CD
Projects can now issue machine credentials for pipelines that cannot open a browser — scoped, optionally pinned to a single environment and a set of IP ranges, and expiring by default.
v1.7.0CLI
Headless Authentication
The CLI now authenticates from APIVAULT_TOKEN, so `apivault run` works in a pipeline with no browser and no stored device token.
v1.6.2Website
A Real Answer When You Cannot Open a Project
Opening a project you are not a member of now explains itself instead of bouncing you to /dashboard without a word or dropping you on the 404 page, and every error screen picked up the redesigned 404's look.
v1.6.1Website
A Real 404 Page
The not-found page now carries the site header and footer, leads with the status code, and tells you which path failed instead of stranding you on a bare block of centred text.
v1.6.0Website
Accessibility, Consent Transparency & Hero Performance
Dialogs are now real dialogs with a focus trap, every form field is properly labelled, the MCP consent screen shows where it is about to send you, and the landing page stops downloading a screenshot it never shows.
v1.5.5Website
Log Status Code Filtering & Lookup by Log ID
The logs endpoint now honours explicit HTTP status codes, can find a single entry by its ID, and rejects an unrecognized status filter instead of quietly returning everything.
v1.6.0CLI
Project Audit & Request Logs
CLI
View, filter, inspect, and stream real-time audit and request logs for your ApiVault projects directly from the terminal.
v1.5.4Website
Agents Told That Failed Attempts Are Audited
The MCP documentation and the agent skill now state that a rejected tool call is recorded in the project's audit log, so an agent has a reason not to retry a vault key the user has not confirmed.
v1.5.3Website
Fixed Status Code Colors in Audit Logs
HTTP status codes in the audit logs table now display distinct semantic accent colors and bold monospace styling instead of appearing monochrome white.
v1.5.2Website
Failed Requests Now Appear in the Audit Log
Denied reveals, wrong vault keys, throttled requests and forbidden writes are recorded alongside the successful ones, each with the reason it failed.
v1.5.1Website
Vault Key Limits Extended to MCP, Project Slugs Accepted
The vault-key attempt limit now covers the MCP tool surface as well as the web and CLI endpoints, and any API call may identify its project by slug instead of only by ID.
v1.5.0CLI
Token Expiry Awareness & Clearer Auth Errors
The CLI now knows when this device's token expires, warns you before it does, and explains what to do when a request is rejected instead of printing a bare “Unauthorized”.
v1.0.4MCP ServerLatest
Vault Key Throttling & Honest Version Reporting
Wrong vault keys are now rate limited on every MCP tool that accepts one, and the server reports its real version to the API instead of a hardcoded string.
v1.5.0Website
Hardened Authentication, Strict CSP & Schema Alignment
Brute-force limits on every credential check, a nonce-based Content Security Policy that refuses injected scripts, expiring CLI tokens, and a migration history that once again matches the schema.
v1.4.10Website
Refined Project Empty State & Quick Actions
Streamlined the empty vault screen with a clean, minimal design featuring direct Add Key and Import .env actions, along with a dedicated filter zero-state.
v1.4.9Website
In-App User Notifications System & Dropdown Header Bell
Introduced an in-app notification center accessible from the user dropdown header, providing real-time alerts for project invitations, security events, CLI/MCP authorizations, and system updates.
v1.4.0CLI
Local Per-Project Config (.apivault.json) & Hierarchical Scopes
Bind project context and CLI settings directly to your local project directory via .apivault.json, eliminating the need to switch projects when changing directories, while retaining global fallback configuration.
v1.4.8Website
Real-Time Audit Logs, Event Stream & SIEM Exports
Comprehensive real-time audit logging for workspace projects with strongly-typed event stream, incremental live streaming, MCP agent & OS tracking, and SIEM / ECS exports.
v1.4.7Website
API Key filtering in project logs
Added an API Key filter to the project logs sidebar with instant search and per-key event counts.
v1.4.6Website
Updated Checkbox elements across the dashboard
Replaced all remaining built-in native checkboxes with the custom Checkbox component in the project settings and modals.
v1.4.5Website
Updated Select component in API Key modal
Replaced the built-in select elements with our custom Select component in the add/edit API key modal.
v1.4.4Website
Added Quick Date Presets to Timeline Filter
Improved the timeline filter with quick preset buttons for 1h, 2h, 5h, 24h, Today, 7 Days, and 30 Days.
v1.4.3Web Dashboard
Export .env Modal Redesign
Refined the project .env export workflow with a cleaner, tab-based UI for switching between file downloads and CLI commands.
v1.4.2Website
Export .env Modal Improvements & Fixes
Redesigned the Export Project .env modal with interactive environment cards, key count indicators, value masking, and one-click copy/download actions.
v1.4.1Website
Project-Scoped .env Export
You can now export a project's API keys directly as a .env file from the keys dashboard.
v1.4.0Web App
Multi-Project Workspaces & Audit Logging
Officially shipped Multi-Project Workspaces, Role-Based Access Control (RBAC), and Real-Time Audit Logs.
v1.3.16Web App
Export Audit Logs
Added the ability to export audit logs as CSV or JSON for SIEM ingestion and compliance archiving.
v1.3.15Website
MCP Project Authorization Hardening
Remote MCP access now remains bound to an active project membership and enforces project write roles.
v1.3.2CLI
Single-Request Key Reveal
Reduced `apivault keys get <id> --reveal` to one API request.
v1.3.14Website
Duplicate Key Request Prevention
Removed redundant dashboard key-list loads and let a reveal response supply the metadata needed by the CLI.
v1.3.13Website
Live Tail Real-Time Log Streaming & Action Details
Introduced Live Tail streaming mode for the Activity Trail to automatically refresh incoming logs, plus enhanced the Log Inspection Drawer with structured action metadata.
v1.3.12Website
Request Metadata Extraction & Log Drawer Visual Overhaul
Fixed request logger metadata extraction for IP addresses, User-Agents, and latency tracking, plus redesigned the Log Inspection Drawer with a sleek grouped-list design.
v1.3.11Website
Interactive Log Details Inspection Drawer
Introduced a slide-over inspection drawer for request & audit logs, offering deep insights into endpoints, query parameters, network origins, device/tool identifiers, latency metrics, and JSON payloads.
v1.3.10Website
Server-Side RBAC Enforcement on Key Mutations
Enforced server-side permission checks across all API key mutation endpoints to ensure read-only viewers cannot create, modify, or delete secrets.
v1.3.9Website
Improved Member Role Selection
Refined the member role selection popover to be cleaner and more intuitive.
v1.3.8Website
Reset Project Feature
Added the ability to reset a project to its default state, wiping all keys and resetting encryption without deleting the project.
v1.3.1CLI
Optimized Single Key Fetching
The CLI now uses the dedicated GET /api/keys/[id] endpoint for individual key operations, reducing payload size and improving request logs.
v1.3.7Website
Project Request Logs
Added a new Request Logs page to the project dashboard to track all API requests.
v1.3.6Web App
Fix Key Reveal Across Projects
Web AppMulti-Project
Fixed a bug where revealing or copying a key after switching projects would fail with 'Could not reveal that key.'
v1.3.5Web App
Dedicated Project Onboarding Experience
Web AppUIOnboarding
Introduced a dedicated, full-screen project onboarding flow for new users to create their first workspace.
v1.3.4Web App
Google Sign-In Username Generation
Web AppAuthentication
Automatically generate a unique username based on the email address when users sign up via Google.
v1.0.3MCP Server
Multi-Project Support (Project-Scoped Connections)
MCPWeb App
MCP connections can now be bound to specific projects during authorization, automatically isolating AI agent access to targeted workspaces.
v1.3.0CLI
Multi-Project Support
CLI
The ApiVault CLI now natively supports multiple projects with a new projects command group and a global --project flag.
v1.3.3Web App
Role-Based Access Control: Admin, Editor, and Viewer Roles
Web AppSecurityAccess Control
Introduced granular project roles (Admin, Editor, Viewer), restricted the Owner role, and added a seamless Transfer Ownership capability.
v1.3.2Web App
Nested Submenu for Team Member Role Management
Web AppUI
Transformed member role selection in project team tables into an interactive nested submenu for a cleaner and more intuitive dropdown interface.
v1.3.1Web App
Dashboard UI & Full-Height Sidebar Redesign
Web AppUI
Redesigned the dashboard and project layouts with a full-height sidebar and streamlined project switcher.
v1.3.0Web App
Multi-Project Workspaces & Clean URLs (/[username]/[project])
Web AppSecurity
Added multi-project support with GitHub/Vercel-style clean URLs (/[username]/[projectSlug]), unique username collection on signup, and a dedicated project sidebar.
v1.2.49Web App
MCP Metadata Synchronization
Web AppMCPDocumentation
Aligned the website's MCP server metadata and documentation with the standalone MCP service release.
v1.2.48Web App
Vault and Authentication Integrity Hardening
Web AppSecurityVault
Made vault rotations atomic, strengthened custom-key derivation, closed authentication enumeration, and limited anonymous CLI handshakes.
v1.0.2MCP Server
Unified Runtime Version Metadata
Aligned MCP handshake, health, and server-card version metadata with the package manifest.
v1.2.41Web App
Vault Dashboard Polish & Passkey Auto-Enablement
Web App
Refined the security onboarding flows to seamlessly link passkeys, improved horizontal scrolling on API keys, and dynamically surfaced vault encryption state.
v1.2.40Web App
Authentication Hardening & Compatibility
Web App
Hardened route guards and authentication boundaries, fixed Vault Key base64 encoding for Unicode compatibility, and adjusted CSP rules for optimal React execution.
v1.2.39Web App
Auth Pages Mobile UX, OTP Keypads & Layout Streamlining
AuthenticationMobile UXWeb App
Comprehensive polish of all authentication flows (login, registration, password reset, email verification): responsive flex layout, mobile numeric keypads for OTPs, standard autocomplete attributes, and unified branding.
v1.2.38Web App
Email Verification & Password Reset with 6-Digit OTPs
AuthenticationSecurityWeb App
Added secure, full-stack email verification and password reset workflows using cryptographically secure 6-digit OTP codes, SHA-256 hashed storage, rate-limiting, and branded transactional email templates.
v1.2.34Web App
Landing Page High-End Visual Overhaul
Web App
Redesigned the landing page with an infinite ecosystem logo marquee, sleek frameless hero dashboard preview, and refined button proportions.
v1.2.32Web App
Landing Page Media & Layout Refinement
Web App
Replaced placeholder codeblocks with authentic high-resolution screenshots of the dashboard, CLI, and MCP. Optimized mobile grid spacing and responsive hero layouts.
v1.2.31Web App
Explicit Google OAuth Sign-In and Registration Separation
AuthenticationOAuthGoogle Sign-InSecurityWeb App
Separated Google OAuth authentication flows to enforce explicit intent: preventing unintended account creations during sign-in when no profile exists, and blocking duplicate registrations when an account is already registered.
v1.2.30Web App
Account Self-Deletion & Comprehensive Legal Policies
Account ManagementPrivacySecuritySettingsLegal
Added permanent account self-deletion in user settings with cascading purge of secrets, tokens, and passkeys, updated comprehensive Terms of Service and Privacy Policy, and standardized support channels on support@apivault.tech.
v1.2.29Web App
Static OpenGraph Branding & Ecosystem Domain Sync
OpenGraphBrandingDocumentationEcosystemWeb App
Integrated custom static OpenGraph preview assets across the web platform and aligned all ecosystem dependencies, Agent Skills, and documentation with the official production domains.
v1.0.1MCP Server
Production Domain Standardization & RFC 9728 Alignment
MCPRFC 9728OAuth 2.1AI Agents
Updated default backend authorization server and public MCP resource endpoints to production domains (https://mcp.apivault.tech and https://apivault.tech).
v0.1.3CLI
Production Endpoint Migration & Installer Upgrades
CLIInstallationAuthentication
Configured the CLI default API gateway to https://apivault.tech and updated standalone PowerShell and Bash installation script URLs.
v1.2.28Web App
Production SEO, OpenGraph Generation & Canonical Domains
SEOMetadataSitemapOpenGraphWeb App
Added production-grade SEO architecture including dynamic sitemap.xml, robots.txt crawl rules, edge-rendered OpenGraph & Twitter cards, Schema.org JSON-LD structured data, and canonical domain resolution for apivault.tech.
v1.2.27Web App
Dynamic Two-Step Verification Method Filtering
AuthenticationSecurityPasskeysTOTP 2FA
Updated the Two-Step Verification challenge screen to query and display only the specific authentication methods (Authenticator App TOTP, Passkey MFA, or both) configured and active on the user's account.
v1.2.22Web App
Dashboard UX Consistency & Deep Linking
Web App
Polished the mobile navigation and settings layouts, added post-login origin deep-link preservation, and refined roadmap/changelog UI across touchscreens.
v1.2.19Web App
Terminology & UX Standardization
Web App
Standardized custom encryption terminology to Vault Key across all platforms, implemented accessible ConfirmModals, and introduced structured DocsStep walkthroughs in the documentation.
v1.0.0MCP Server
Standalone MCP Server Architecture & Scoped API Gateway
MCPAPI GatewayOAuth 2.1
Separated the Model Context Protocol (MCP) server into an independent, public repository with zero database credentials and launched dedicated scope-enforced REST API gateway endpoints (/api/mcp/v1/keys).
v0.1.1MCP Server
MCP Server Security Hardening & RFC Compliance
MCPSecurityOAuth 2.1
Hardened OAuth 2.1 scope isolation across REST endpoints, added strict redirect URI validation in Dynamic Client Registration (RFC 7591), and added standard CORS preflights and RFC 6749 Cache-Control headers.
v0.1.2CLI
Dynamic Version Resolution & Vault Key Standardization
CLISecurityConfig
CLI update standardizing custom encryption prompts and flags to Vault Key, resolving package version dynamically from package.json, and preparing npm distribution.
v1.2.16Web App
Interactive Product Roadmap
Web App
Launched the public interactive Product Roadmap with deep-linking, multi-project capability teasers, and a unified detail modal.
v1.2.15Web App
Documentation Callouts Redesign & Visual Polish
Web AppDocumentationChangelog
Redesigned all notes, warnings, tips, info, and danger notices across documentation with modern callouts, harmonized color palettes, and variant-matched inline code badges.
v1.2.14Web App
Interactive Shell Live Mode & Monospace Mode Tabs
Web AppShellCLI
Added an authenticated Live Mode toggle and clean monospace mode tabs to the in-browser terminal, allowing developers to execute real zero-knowledge CLI operations directly against their vault.
v1.2.12Web App
Changelog Detail Pages, Search Redesign & Dashboard Polish
Web AppDocumentationDashboardAI
Introduced dedicated shareable detail pages for changelog releases with AI assistant integrations, real-time search, mobile filter selector, and edge-to-edge dashboard card polish.
v1.2.10Web App
Persistent Floating Terminal FAB & Inline JSON Clipboard Actions
Web AppShellCLI
Added a persistent floating action button (FAB) for the interactive shell with global keyboard shortcuts, active session radar beacon, and inline JSON copy buttons.
v1.2.8Web App
Interactive In-Browser Terminal Runner & 100% CLI Parity
Web AppDocumentationCLI
Built an emulated interactive documentation terminal runner supporting 100% Commander CLI parity, quote-aware tokenization, interactive prompt wizards, and autocompletion.
v1.1.3Web App
User Profile Avatars, Dashboard Quick Links & Mobile Navigation
Web AppAuthDashboard
Added user profile avatar image rendering from database columns, quick navigation links in user dropdowns, and refined mobile drawer navigation with theme toggle.
v1.1.0Web App
Documentation Portal Redesign & Command Palette Search
Web AppDocumentation
A major redesign of the ApiVault documentation portal introducing a command-palette search modal (Cmd+K), responsive mobile navigation drawer, and step-by-step guides.
v0.1.1CLI
Flag Standardization & Custom Encryption
CLISecurity
CLI update standardizing vault key flags to --vault-key for subcommand consistency and adding custom encryption support to keys modification.
v0.1.0MCP Server
Remote Model Context Protocol (MCP) Integration
MCPAISecurity
Connect AI agents in Cursor and Claude Desktop directly to your ApiVault keys via Model Context Protocol (MCP) with OAuth 2.0 authorization.
v0.1.0CLI
Initial CLI Release
CLISecurity
Initial release of the apivault command-line client supporting secret process injection, dotenv export/restore, and local CLI configuration.
v1.0.0Web App
ApiVault Web App Launch — Zero-Knowledge Secret Management
Web AppAuthSecurity
The initial release of ApiVault — zero-knowledge secret management built for developers, terminal workflows, and security-focused teams.