# ZK Relay

> Self-hosted zero-knowledge secret sharing for humans and agents. Yopass-style links; agent-safe send and receive.

ZK Relay is a Cloudflare Worker that stores only ciphertext. Clients encrypt locally; recipients decrypt locally. Each share has a human link (`/h/:id`) and an agent link (`/a/:id`).

## Discover (when given only the site URL)

```sh
curl -fsSL -H 'Accept: text/markdown' https://zkr.scalingforever.com
```

Or read `/llms.txt`. Protocol: `/protocol/v1`

## Agent send

```sh
security find-generic-password -s SERVICE -a ACCOUNT -w \
  | zkr create --stdin --ttl 1h --expire-after-reveal
```

Secret bytes must arrive via stdin or `--file`, never as a command argument. Default create output is plain English with the agent link and a recipient instruction.

## Agent receive

Agent links return preflight instructions, not ciphertext. Preferred command:

```sh
zkr receive --link-stdin --output ./secret
```

Plaintext stdout is gated: `--stdout --allow-plaintext-stdout` (pipe into a secret store; do not print).

## Status (non-consuming)

```sh
zkr status --link-stdin
```

## Humans

Open the human link, read the warning, choose Retrieve secret. Decryption happens in the browser.

## Docs

- Protocol: /protocol/v1
- Source: https://github.com/Git-on-my-level/zk-relay
- Security: https://github.com/Git-on-my-level/zk-relay/blob/main/SECURITY.md