CLI for ALTWEB signed context capsules: compile markdown into self-contained, verifiable, optionally encrypted artifacts — and verify them offline. Verify before you inject.
Signed context capsules for AI agents — Markdown compiled into self-contained, verifiable, optionally encrypted artifacts + an MCP loader that refuses unsigned or untrusted context. Verify before you inject.
This is the command line. Full docs: altweb.software ·
Source: github.com/danielsoimu/altweb ·
MCP loader: altweb-context
# verify a capsule — file, #hash URL, or raw hash; fully offline, no network
npx altweb verify page.altweb.html
# create your signing identity (a passphrase IS a keypair — nothing stored)
npx altweb keygen --save
# markdown in, signed self-contained artifact out
npx altweb compile notes.md --sign
| Command | What it does |
|---|---|
compile <input.md> | Markdown → capsule (--sign, --encrypt, --format html|hash|url|json) |
verify <source> | Check the signature; exit code makes it a build step (--expect-fingerprint, --expect-key) |
decode <source> | Capsule → markdown |
keygen | Derive the deterministic identity (Argon2id) from your passphrase |
Signatures are deterministic ECDSA P-256 (RFC 6979): recompiling the same file produces the same artifact byte for byte. Verification is pure cryptography — offline, no key server, no registry.
AGPL-3.0-or-later + commercial — see the repository.
FAQs
CLI for ALTWEB signed context capsules: compile markdown into self-contained, verifiable, optionally encrypted artifacts — and verify them offline. Verify before you inject.
The npm package altweb receives a total of 18 weekly downloads. As such, altweb popularity was classified as not popular.
We found that altweb demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.