# Microtoll Engine

> The locks, pre-built: sign-in, key handling, access control and revocation for end-to-end-encrypted apps, verified by published test vectors, with the threat model written down. Browser packages with zero dependencies (Apache-2.0) and a reference server (AGPL-3.0-only). Pre-1.0: function names may change; the bytes it writes never will.

## Start

- [The locks, pre-built](https://microtoll.dev/index.html): What the engine is, what it is for, and what it is not.
- [Start here](https://microtoll.dev/start-here.html): From zero to a working end-to-end-encrypted app in one sitting: the example, then the four packages in order.

## Packages

- [@microtoll/crypto-core](https://microtoll.dev/packages/crypto-core.html): Primitives, labelled key derivation, versioned wire formats, hybrid post-quantum seal.
- [@microtoll/identity](https://microtoll.dev/packages/identity.html): Root key, unlock methods (passkey PRF, recovery code), sessions, restore, deletion.
- [@microtoll/identity — formats and the hardening design (M2, D-24)](https://microtoll.dev/packages/identity-formats.html): What the identity layer seals and signs, version 2.
- [@microtoll/access](https://microtoll.dev/packages/access.html): Sealed sharing, capabilities, share links, removal with key rotation, two-tier disclosure.
- [@microtoll/access — the object model and the hardening design (M3)](https://microtoll.dev/packages/access-formats.html): The object model and what the access layer seals and signs, version 2.
- [@microtoll/mailbox](https://microtoll.dev/packages/mailbox.html): Direct invitations under mailbox labels only two people can compute.
- [@microtoll/mailbox — formats](https://microtoll.dev/packages/mailbox-formats.html): The mailbox label and the version 2 bundle.
- [@microtoll/blind-store](https://microtoll.dev/packages/blind-store.html): The server that holds only what it cannot read: library, schema, reference server.
- [@microtoll/blind-store — design for decision (M4)](https://microtoll.dev/packages/blind-store-design.html): The collection model, the bound handshake, the schema rules, the deployment shape.
- [@microtoll/mcp](https://microtoll.dev/packages/mcp.html): Docs search and project scaffolding for AI coding agents, over the Model Context Protocol.

## Examples and deployment

- [Notes — the first example](https://microtoll.dev/examples/notes-app.html): End-to-end-encrypted notes with sharing and revocation, in ten minutes.
- [Invites — the second example](https://microtoll.dev/examples/invite-app.html): Inviting a known person directly, with nothing to forward.
- [Deploying blind-store](https://microtoll.dev/deploy.html): The hardened Compose file, the Dockerfile and the Nginx sample.

## The honest part

- [THREATMODEL.md — Microtoll Engine](https://microtoll.dev/threat-model.html): Adversaries, global limits, and what each package does and does not protect.
- [The honest limits](https://microtoll.dev/honest-limits.html): What nothing here protects against, on one page.
- [Formats and stability](https://microtoll.dev/formats-and-stability.html): The promise about bytes, the version numbers, and how a format is allowed to change.

## For agents

- [For AI coding agents (and the people using them)](https://microtoll.dev/for-agents.html): llms.txt, the MCP server and the scaffold: wiring the engine in from inside a coding tool.

## Project

- [Contributing](https://microtoll.dev/contributing.html): The rules, the sign-off, and what a pull request needs.
- [Security policy](https://microtoll.dev/security.html): How to report a weakness and what to expect.
- [DECISIONS.md — founder decisions log](https://microtoll.dev/decisions.html): The founder's decisions: every crypto, licensing and scope choice with its reasoning.