ApiVault Changelog

Static OpenGraph Branding & Ecosystem Domain Sync (v1.2.29)

Fri, 21 Aug 2026 00:00:00 GMT

Integrated custom static OpenGraph preview assets across the web platform and aligned all ecosystem dependencies, Agent Skills, and documentation with the official production domains.

[Improvement] Configured static social preview assets (apivault-og.png) for enhanced social sharing performance.
[Improvement] Synchronized all endpoint references across CLI, MCP, and AI Agent Skill repositories to production domains.
[Improvement] Updated documentation navigation metadata and breadcrumb dates.

Production Domain Standardization & RFC 9728 Alignment (v1.0.1)

Fri, 21 Aug 2026 00:00:00 GMT

Updated default backend authorization server and public MCP resource endpoints to production domains (https://mcp.apivault.tech and https://apivault.tech).

[Improvement] Updated default API_VAULT_URL and MCP_SERVER_URL fallbacks to production domains.
[Improvement] Updated all IDE connector templates and setup commands to use https://mcp.apivault.tech/mcp.
[Security] Updated security policy contact address to security@apivault.tech.

Production Endpoint Migration & Installer Upgrades (v0.1.3)

Fri, 21 Aug 2026 00:00:00 GMT

Configured the CLI default API gateway to https://apivault.tech and updated standalone PowerShell and Bash installation script URLs.

[Improvement] Updated built-in API_BASE_URL to https://apivault.tech.
[Improvement] Updated standalone install script URLs for Linux/macOS and Windows PowerShell.

Production SEO, OpenGraph Generation & Canonical Domains (v1.2.28)

Thu, 20 Aug 2026 00:00:00 GMT

Added production-grade SEO architecture including dynamic sitemap.xml, robots.txt crawl rules, edge-rendered OpenGraph & Twitter cards, Schema.org JSON-LD structured data, and canonical domain resolution for apivault.tech.

[Feature] Added dynamic sitemap.xml and robots.txt routes covering all documentation, releases, and legal pages.
[Feature] Implemented edge-rendered OpenGraph and Twitter card dynamic image generation.
[Improvement] Injected Schema.org JSON-LD structured data across the site for enhanced search engine indexing.
[Improvement] Updated canonical domain and metadataBase to https://apivault.tech.

Dynamic Two-Step Verification Method Filtering (v1.2.27)

Thu, 20 Aug 2026 00:00:00 GMT

Updated the Two-Step Verification challenge screen to query and display only the specific authentication methods (Authenticator App TOTP, Passkey MFA, or both) configured and active on the user's account.

[Improvement] Hidden unconfigured 2FA methods (Passkey verification or TOTP code entry) on the Two-Step Verification page so only active methods are shown.
[Feature] Added /api/auth/2fa/methods endpoint to securely resolve active two-step verification capabilities for authenticating users.
[Improvement] Added dynamic 2FA helper descriptions and a direct 'Back to sign in' action on the verification screen.

Accurate Mobile & Tablet Session Detection and Device Icons (v1.2.26)

Thu, 20 Aug 2026 00:00:00 GMT

Resolved an issue where mobile logins were misidentified as Linux or macOS desktop sessions by reordering OS/browser user-agent evaluation precedence and introducing responsive device icons for smartphones, tablets, and desktop browsers.

[Fix] Fixed mobile user-agent parsing where Android devices were labeled as 'Google Chrome on Linux' and iOS devices as 'Apple Safari on macOS'.
[Improvement] Enhanced browser detection to support mobile tokens including CriOS, FxiOS, EdgA, EdgiOS, and Samsung Internet.
[Improvement] Added dynamic Smartphone and Tablet icons in Settings → Sessions & Devices based on device form factor.

Changelog Pagination, Modal Styling & Roadmap Mobile Consistency (v1.2.25)

Thu, 20 Aug 2026 00:00:00 GMT

Polished mobile pagination on changelog release detail pages, standardized modal styling and cancel button aesthetics across all app dialogs, and optimized the roadmap kanban and detail modals for touchscreens.

[Improvement] Enhanced mobile styling for changelog adjacent release pagination cards with clean alignment and multi-line title wrapping.
[Improvement] Standardized modal cancel buttons to secondary variant with solid backgrounds across all modals.
[Fix] Fixed dropdown scrolling inside portaled modal containers.
[Improvement] Optimized Roadmap board headers, cards, and detail modal dialogs for mobile viewports.

Docs Sidebar & Table of Contents Slide Transitions (v1.2.24)

Thu, 20 Aug 2026 00:00:00 GMT

Enhanced the documentation mobile drawers so the Docs navigation sidebar smoothly slides in from the left and returns left on close, while the On This Page TOC drawer slides in from the right and returns right on close.

[Improvement] Added smooth left slide-in and return exit animations for the documentation navigation drawer.
[Improvement] Added smooth right slide-in and return exit animations for the On This Page table of contents drawer.
[Improvement] Added animated fade-in and fade-out transitions for the mobile drawer backdrop.

Post-Login Origin Page Redirect & Deep Link Preservation (v1.2.23)

Thu, 20 Aug 2026 00:00:00 GMT

Added full origin URL preservation and return redirection across all authentication methods (Credentials, TOTP, Passkeys, Passkey MFA, Google OAuth) and protected layouts.

[Feature] Implemented origin URL callback redirects across Credentials, TOTP, Passkey, Passkey MFA, and Google OAuth sign-in flows.
[Improvement] Updated Dashboard and Settings layouts with middleware header inspection to capture deep links during session redirects.
[Security] Enforced strict relative callback URL validation to prevent open-redirect vulnerabilities.
[Improvement] Preserved return destination query parameters through user registration, 2FA onboarding, and documentation navigation links.

Settings UI Consistency & Mobile View Optimization (v1.2.22)

Thu, 20 Aug 2026 00:00:00 GMT

Refactored settings navigation and pages with consistent design system aesthetics, responsive horizontal scroll tabs on mobile, auto-scrolling active tabs, and responsive modal actions.

[Improvement] Added horizontal scrolling pill navigation on mobile devices with smooth auto-scroll to active tab.
[Improvement] Standardized settings box layout, footers, action button variants, and responsive item rows across all subpages.
[Fix] Fixed settings and dashboard loading skeleton collapsing to compact width on mobile viewports.
[Improvement] Added responsive modal action footers for smooth full-width buttons on mobile screens.
[Fix] Fixed OAuth connect callback redirect URLs to route directly to /settings/oauth.

Replaced Native Browser Alerts and Confirms with Custom ConfirmModal (v1.2.21)

Tue, 18 Aug 2026 00:00:00 GMT

Modernized all browser confirmation and alert dialogs across the web dashboard and settings pages with accessible, animated custom confirmation and alert modals.

[Improvement] Created reusable ConfirmModal UI component supporting danger, warning, and alert-only variants.
[Improvement] Replaced all native confirm() dialogs in dashboard and settings with animated modal dialogs.
[Improvement] Replaced all native alert() popups with accessible, non-blocking modal alerts.
[Improvement] Ensured seamless keyboard navigation (Enter/Escape) and responsive mobile button layouts.

apivault-cli v0.1.2 — Dynamic Version Resolution & Vault Key Standardization (v0.1.2)

Tue, 18 Aug 2026 00:00:00 GMT

CLI update standardizing custom encryption prompts and flags to Vault Key, resolving package version dynamically from package.json, and preparing npm distribution.

[Improvement] Standardized all interactive prompts and option descriptors to use 'vault key'.
[Fix] Connected CLI `--version` output dynamically to `package.json`.
[Improvement] Optimized CommonJS distribution bundle with tsup build targets.

Standardized Encryption Terminology to Vault Key Across All Products (v1.2.20)

Tue, 18 Aug 2026 00:00:00 GMT

Renamed all custom zero-knowledge passphrase terminology to Vault Key across the web dashboard, encryption settings, documentation portal, CLI client, and MCP server.

[Improvement] Standardized encryption modal, forms, and notifications in the web dashboard to use 'Vault Key'.
[Improvement] Unified CLI options, interactive prompts, and config keys to consistently refer to vault keys.
[Improvement] Updated MCP tool schemas and error diagnostics to reference custom vault keys.
[Improvement] Synchronized documentation portal and legal pages with updated vault key terminology.

Standardized Step Walkthroughs Across Documentation (v1.2.19)

Tue, 18 Aug 2026 00:00:00 GMT

Converted all step-by-step procedures and setup guides across the documentation portal into structured DocsStep timeline walkthroughs.

[Improvement] Converted Claude Desktop, ChatGPT, Devin, and Raycast setup guides in MCP docs to DocsStep components.
[Improvement] Refactored CLI Quick start and Web App connect & authorize workflows into structured DocsStep walkthroughs.
[Improvement] Updated server-side documentation markdown generator to cleanly parse and render DocsSteps.

Standalone MCP Server Architecture & Scoped API Gateway (v1.2.0)

Tue, 18 Aug 2026 00:00:00 GMT

Separated the Model Context Protocol (MCP) server into an independent, public repository with zero database credentials and launched dedicated scope-enforced REST API gateway endpoints (/api/mcp/v1/keys).

[Feature] Scaffolded standalone public apivault-mcp repository with zero database credentials.
[Feature] Added dedicated /api/mcp/v1/keys scope-enforced REST gateway endpoints on ApiVault.
[Security] Zero-knowledge custom encryption vault keys and decryption remain strictly isolated to the backend vault.
[Improvement] Configurable MCP_RESOURCE_URL support for external standalone MCP hosting.

MCP Server Security Hardening & RFC Compliance (v1.1.1)

Tue, 18 Aug 2026 00:00:00 GMT

Hardened OAuth 2.1 scope isolation across REST endpoints, added strict redirect URI validation in Dynamic Client Registration (RFC 7591), and added standard CORS preflights and RFC 6749 Cache-Control headers.

[Security] Enforced strict scope boundary isolation preventing MCP OAuth tokens from bypassing scopes via REST endpoints.
[Security] Added rigorous redirect URI validation and length constraints to Dynamic Client Registration (RFC 7591).
[Improvement] Hardened PKCE S256 verification using constant-time cryptographic buffer comparison.
[Improvement] Added RFC 6749 Cache-Control headers and cross-origin CORS OPTIONS preflight support to MCP and OAuth routes.

Interactive Roadmap Detail Modal & Deep Linking (v1.2.18)

Mon, 17 Aug 2026 00:00:00 GMT

Introduced a dedicated Detail Modal with direct URL deep-linking, quick copy share links, keyboard navigation, and ultra-compact board cards.

[Feature] Added dedicated Roadmap Detail Modal with keyboard accessibility (`Esc` to dismiss) and background scroll lock.
[Feature] Added direct URL deep-linking (`?item=`) and one-click share link copying with toast feedback.
[Improvement] Redesigned roadmap board cards into ultra-compact viewports with deliverable indicators and hover transitions.

Roadmap UI Polish & Iconography (v1.2.17)

Mon, 17 Aug 2026 00:00:00 GMT

Re-introduced functional iconography to the Roadmap board and list views to improve scannability and visual hierarchy.

[Improvement] Added functional category icons (`projects`, `web`, `cli`, `mcp`, `security`) to the roadmap tags.
[Improvement] Added status icons (`in-progress`, `planned`, `under-consideration`, `shipped`) to board column headers and list view badges.
[Improvement] Ensured tags and badges use inline-flex alignment for perfectly centered icon and text combinations.

Interactive Product Roadmap & Multi-Project Profiles (v1.2.16)

Mon, 17 Aug 2026 00:00:00 GMT

Launched the public interactive Product Roadmap featuring the upcoming Multi-Project Profiles & Isolated Workspaces capability, Team RBAC, and Secret Auto-Rotation.

[Feature] Launched public interactive Product Roadmap page at `/roadmap` with status/category filtering, instant search, and technical specifications.
[Feature] Detailed the architectural design for upcoming Multi-Project Profiles and Isolated Workspaces across Web, CLI, and MCP Server.
[Improvement] Added Roadmap navigation links to the header navbar and footer product menu.

Documentation Callouts Redesign & Visual Polish (v1.2.15)

Mon, 17 Aug 2026 00:00:00 GMT

Redesigned all notes, warnings, tips, info, and danger notices across documentation with modern callouts, harmonized color palettes, and variant-matched inline code badges.

[Improvement] Introduced callout redesign system featuring side-by-side flex alignment, refined typography, and high-legibility accent palettes.
[Feature] Added dedicated color themes for Note, Tip/Success, Info, Warning/Caution, and Danger/Important variants in both light and dark modes.
[Improvement] Variant-matched inline code pills, bullet lists, and interactive links inside all documentation and changelog callouts.
[Improvement] Enhanced documentation across Getting Started, CLI Reference, MCP Integration, Web App, and Security with clear visual callouts.

Interactive Shell Live Mode & Monospace Mode Tabs (v1.2.14)

Sun, 16 Aug 2026 00:00:00 GMT

Added an authenticated Live Mode toggle and clean monospace mode tabs to the in-browser terminal, allowing developers to execute real zero-knowledge CLI operations directly against their vault.

[Feature] Added header mode toggle switch between 'Demo Mode' (in-memory mock sandbox) and 'Live Vault' (authenticated backend API calls).
[Feature] Connected `apivault whoami`, `apivault keys list`, `apivault keys get`, `apivault keys add`, `apivault keys update`, and `apivault keys delete` to real backend endpoints in Live Mode.
[Feature] Integrated live decryption via `/api/keys/[id]/decrypt` with custom vault key prompt support for `--reveal`.
[Improvement] Replaced cluttered toggle with native monospace `demo` and `live` mode tabs centered directly within the terminal drawer header.
[Improvement] Dynamic suggestion autocomplete automatically reflects live vault key IDs and metadata when Live Mode is activated.
[Improvement] Added real-time pulsing connection beacon, persistent preference storage, and minimized FAB badge status for Live Vault mode.

Changelog Detail Pages, Search Redesign & Dashboard Polish (v1.2.12)

Sun, 16 Aug 2026 00:00:00 GMT

Introduced dedicated shareable detail pages for changelog releases with AI assistant integrations, real-time search, mobile filter selector, and edge-to-edge dashboard card polish.

[Feature] Added dedicated static release detail routes (`/changelog/[slug]`) with SEO metadata, categorized change badges, and previous/next release pagination.
[Feature] Added 'Open with AI' shortcuts for ChatGPT, Claude, and Perplexity with pre-formatted release inquiry prompts.
[Feature] Added quick action shortcuts to copy the permalink or copy an optimized AI prompt directly to the clipboard.
[Improvement] Streamlined the general changelog timeline into a clean, scannable feed of release summaries with click-through to full release notes.
[Improvement] Redesigned changelog category filters into standalone pill badges and added a custom mobile dropdown selector.
[Improvement] Added real-time search across release titles, version numbers, products, summaries, and changelog items.
[Improvement] Refactored `.keyCard` layout to separate the card body from the footer, allowing full-width borders and subtle footer backgrounds.

Persistent Floating Terminal FAB & Inline JSON Clipboard Actions (v1.2.10)

Sun, 16 Aug 2026 00:00:00 GMT

Added a persistent floating action button (FAB) for the interactive shell with global keyboard shortcuts, active session radar beacon, and inline JSON copy buttons.

[Feature] Introduced a persistent floating circular shell trigger button (FAB) that is always available when the drawer is closed or minimized.
[Feature] Positioned an inline copy icon button directly next to opening `{` / `[` on JSON outputs in the interactive shell with immediate 'Copied!' feedback.
[Feature] Added global keyboard shortcut `Ctrl + `` / `Cmd + `` to toggle and restore the interactive shell terminal from anywhere in the application.
[Improvement] Added glowing active state styling (`.active` with custom gradient background, pulsing neon aura, and an animated radar ping beacon) when a terminal session is active.
[Improvement] Scoped the floating interactive shell trigger button and global hotkey to Documentation (`/docs`) and Dashboard (`/dashboard`) sections only.
[Fix] Ensured exact CLI parity in JSON mode (`--json`): masked view with ISO timestamps is output by default, strictly including decrypted `rawKey` only when `--reveal` is explicitly provided.

Interactive In-Browser Terminal Runner & 100% CLI Parity (v1.2.8)

Sat, 15 Aug 2026 00:00:00 GMT

Built an emulated interactive documentation terminal runner supporting 100% Commander CLI parity, quote-aware tokenization, interactive prompt wizards, and autocompletion.

[Feature] Added 'Run in shell' execution button to command blocks in documentation, install options, and terminal showcases.
[Feature] Built a full-featured emulated interactive shell drawer supporting command history, realistic CLI output, and interactive input execution.
[Feature] Implemented step-by-step interactive prompt wizard with in-place line updates for `keys add`, `keys update`, and `keys delete`.
[Improvement] Implemented quote-aware command line tokenization (`tokenizeCommand`) for multi-word argument parsing.
[Improvement] Enforced strict whitelist validation on `apivault config` keys (`run.command`, `run.env`, `vaultKey`) with typo suggestions.
[Fix] Normalized status hints, auto-scrolling suggestion navigation, and dedicated help screens across all top-level commands and subcommands.

User Profile Avatars, Dashboard Quick Links & Mobile Navigation (v1.2.3)

Sat, 15 Aug 2026 00:00:00 GMT

Added user profile avatar image rendering from database columns, quick navigation links in user dropdowns, and refined mobile drawer navigation with theme toggle.

[Feature] Displayed user profile pictures from the database image column in header avatar buttons and dropdown menus.
[Feature] Added quick navigation links for Home, Documentation, and Changelog with icons in the dashboard user navigation menu.
[Improvement] Added theme switcher toggle and borderless menu button to the landing page mobile drawer navigation.
[Fix] Synchronized user image data in NextAuth session callbacks, token refresh, and user profile APIs.

Documentation Portal Redesign & Command Palette Search (v1.2.0)

Fri, 14 Aug 2026 00:00:00 GMT

A major redesign of the ApiVault documentation portal introducing a command-palette search modal (Cmd+K), responsive mobile navigation drawer, and step-by-step guides.

[Feature] Added command-palette search modal (`Cmd+K` / `Ctrl+K`) with instant keyword indexing across all documentation pages.
[Feature] Introduced interactive installation method selector (`DocsInstallSelector`) for npm, npx, and standalone scripts.
[Improvement] Redesigned documentation layout with responsive mobile navigation drawer and dynamic table of contents tracking.
[Improvement] Added `DocsSteps` component for structured walkthroughs in getting started and MCP integration guides.
[Fix] Fixed sidebar auto-scrolling behavior when switching between documentation pages.

apivault-cli v0.1.1 — Flag Standardization & Custom Encryption (v0.1.1)

Fri, 14 Aug 2026 00:00:00 GMT

CLI update standardizing vault key flags to --vault-key for subcommand consistency and adding custom encryption support to keys modification.

[Feature] Standardized vault key flag to `--vault-key` for consistency across all subcommands (`apivault keys add`, `apivault keys update`, `apivault run`).
[Feature] Added `--vault-key` support to `apivault keys add` and `apivault keys update` commands for custom encryption accounts.
[Fix] Updated repository links to `TLB-STATION/apivault` and added MIT license metadata.

apivault-cli v0.1.0 — Initial CLI Release (v0.1.0)

Wed, 01 Jul 2026 00:00:00 GMT

Initial release of the apivault command-line client supporting secret process injection, dotenv export/restore, and local CLI configuration.

[Feature] `apivault run` command to inject encrypted secrets directly into child processes without writing `.env` files to disk.
[Feature] Environment auto-restoration and isolated process environment handling.
[Feature] `apivault env export` and `apivault env restore` commands for local `.env` file management.
[Feature] `apivault config` subcommands (`config get`, `config set`, `config list`) for managing local CLI defaults in `~/.apivault/config.json`.
[Feature] Full terminal key management commands (`keys list`, `keys add`, `keys get`, `keys update`, `keys delete`).
[Security] Enforced 0600 file permission isolation for stored authentication tokens in `~/.apivault/token.json`.

Remote Model Context Protocol (MCP) Integration (v1.1.0)

Wed, 01 Jul 2026 00:00:00 GMT

Connect AI agents in Cursor and Claude Desktop directly to your ApiVault keys via Model Context Protocol (MCP) with OAuth 2.0 authorization.

[Feature] Remote Model Context Protocol (MCP) server support enabling AI coding assistants to query and manage credentials.
[Feature] OAuth 2.0 PKCE authentication flow for secure remote agent connection and scope consent.
[Feature] Granular scope controls (`keys:read`, `keys:write`, `keys:reveal`) to limit AI agent permissions.
[Feature] Six dedicated MCP tools: `list_keys`, `get_key`, `reveal_key`, `add_key`, `update_key`, and `delete_key`.
[Improvement] Added Sessions & Devices settings page for auditing and revoking active CLI and MCP tokens.

ApiVault Web App Launch — Zero-Knowledge Secret Management (v1.0.0)

Mon, 01 Jun 2026 00:00:00 GMT

The initial release of ApiVault — zero-knowledge secret management built for developers, terminal workflows, and security-focused teams.

[Feature] Zero-knowledge encrypted secret vault with default and custom vault key derivation.
[Feature] Web Dashboard with environment management (Development, Staging, Production) and service tagging.
[Security] Authentication suite supporting Passkeys (WebAuthn), TOTP 2FA, and Google OAuth 2.0.