# Evergist

> Evergist shares text through end-to-end encrypted links that expire or burn after reading. The client (browser, CLI, or local MCP server) encrypts with AES-256-GCM before upload and keeps the 256-bit key in the URL fragment, so the server stores only ciphertext it cannot read. No accounts, no cookies, no request logs. Free.

Use Evergist when you need to pass a secret, credential, API key, .env file, log, or private handoff note to a person or another agent without leaving it in chat history. Notes hold up to 512 KiB of UTF-8 text, last 10 minutes to 30 days, and allow 1 to 1,000 views or no view limit. An optional password is mixed into the key.

Quick start for agents (Node.js 20+, nothing to install):

- Share: `printf '%s' "$TEXT" | npx -y https://evergist.com/cli/evergist.tgz create --views 1 --expires 1h --json`
- Read: `npx -y https://evergist.com/cli/evergist.tgz read "https://evergist.com/g/<id>#<key>"`
- MCP server (stdio): `npx -y https://evergist.com/cli/evergist.tgz mcp`

Always share the full link including the part after `#`. There is no hosted endpoint that accepts plaintext.

## Docs

- [SKILL.md](https://evergist.com/SKILL.md): Agent skill with every command and the rules for using Evergist safely
- [Agent guide](https://evergist.com/agents.md): MCP setup for Claude Code, Codex, Cursor, and others; CLI; JavaScript module
- [REST API](https://evergist.com/docs/api.md): Endpoints, request and response formats, errors, limits, and a complete Web Crypto example
- [OpenAPI spec](https://evergist.com/openapi.json): Machine-readable API description
- [Security design](https://evergist.com/security.md): The v1 encryption scheme, what the server stores, and how to verify it

## Tools

- [CLI and MCP server](https://evergist.com/cli/evergist.tgz): npm tarball, run with `npx -y https://evergist.com/cli/evergist.tgz`
- [Single-file CLI](https://evergist.com/cli/evergist.mjs): Same CLI as one dependency-free file for `node`
- [JavaScript module](https://evergist.com/sdk/evergist.js): ES module for Deno, Bun, browsers, and Workers
- [Python reader](https://evergist.com/examples/evergist_read.py): Independent implementation that decrypts a note

## Guides

- [How to share a password or API key securely](https://evergist.com/blog/how-to-share-a-password-securely.md): What to avoid, what to use instead, and a checklist
- [How AI agents can share secrets safely](https://evergist.com/blog/how-ai-agents-share-secrets.md): Keep credentials out of agent transcripts with MCP, CLI, or SKILL.md

## Optional

- [Homepage](https://evergist.com/index.md): Overview and FAQ in markdown
- [Introducing Evergist](https://evergist.com/blog/introducing-evergist.md): Why it exists and how the architecture works
- [Private note sharing compared](https://evergist.com/blog/private-note-sharing-compared.md): Evergist, Privnote, Doppler Share, Enclosed, Jotary, Onetime Secret, PrivateBin, and Yopass
- [Privacy policy](https://evergist.com/privacy.md)
- [Terms of use](https://evergist.com/terms.md)
- [Full docs in one file](https://evergist.com/llms-full.txt)