Use at your own risk

edgekms.dev is an early service run by one person. Read this before you trust it with a key.

No warranty

The service, the edgekms CLI and this site are provided as is, without warranty of any kind, express or implied, including fitness for a particular purpose. I'm not liable for any loss or damage that comes from using them, including lost keys, lost data or downtime. Use them at your own risk.

It may change or stop

The service may change, have outages, or stop altogether, with or without notice. Signups are invite-only, and access may be limited or withdrawn.

You can always leave

While the service runs, an owner can export a tenant's root key at any time, including from a suspended tenant, and with it and the tenant's config decrypt everything offline with the CLI, or move to OpenBao, Vault or a self-hosted edgekms Worker. Export is in the quickstart. Keep your own copy; it's the one protection against the service going away that doesn't depend on me.

What the service holds

• Your GitHub account's numeric id and login, from signing in.
• Your tenants: their names, configs, members, invitations and wrapped root keys. A config holds whatever you put in it, such as the GitHub ids, repository ids and SSH public keys your roles bind.
• SSH public keys you register on your account, with their labels.
• An invite request's GitHub login and note, until an operator deletes it.
• Audit events for every operation, with the request's IP address and country, the token's id, the operation, the key name and identifying claims from the login (such as the repository and workflow for a GitHub Actions job). They're kept for retention under a lock and can't be deleted early.

Plaintext, ciphertext and tokens are never logged. The console sets a session cookie while you're signed in; this site sets no cookies and runs no analytics.

Who processes it

• Cloudflare runs the service (Workers, D1, R2, KV, Secrets Store) and this site, and sees every request.
• GitHub authenticates you when you sign in or log in with a GitHub account, and the console asks GitHub's public API for logins and repository ids from your browser.

Questions about what the service holds go to [email protected], and security problems to the address on the security page.