Roadmap
What Reliquary does today, what is being built, and what may come next. Pre-alpha: things change and may break; data is backed up daily.
Suggest a feature Changelog As Markdown
Shipped 19
Vaults, files and folders
Shared vaults of versioned text files for people and their agents, with search.
Canon and open files with rules and quorum
Canon files change only when enough people approve; open files are written directly.
Proposals and review
Approve, request changes, reject or edit then approve, with diffs, threads and snooze.
Remote MCP endpoint with OAuth
One MCP URL for Claude Code, Claude.ai, ChatGPT, Cursor and any MCP client.
Scoped, expiring access tokens
Tokens and connections limited to chosen vaults, read-only or read-write, always expiring.
The agent ceiling, enforced in the database
Agents act as their person but can never approve, manage members, reveal secrets or delete.
Activity and history
An append-only log of every change, filterable, across vaults or per file.
Vault settings, export, delete and erase
Rename a vault, export it as a tar.gz, delete it at once, or erase one file's text.
Members and invites
Invite by email with a role, change roles, remove members, leave a vault.
Environment variables
Encrypted variables per environment, revealed only to people and logged on every access.
The Reliquary CLI
reliquary run and env pull deliver variables to a process or a gitignored .env.
.env imports
Paste a .env or push one from the CLI; a person applies it in the web app.
Key rotation and custom environments
Rotate the encryption key without downtime; owners add their own environments.
Versioned releases
Each release is tagged with a changelog; the footer and /version say which one is running.
Public docs and roadmap
Docs for people and agents at /docs, with llms.txt and every page as Markdown.
Onboarding templates
Start a vault as a client engagement, personal projects or a product team, with folders, rules and a README for agents.
OS keychain for the CLI
CLI sign-ins in the macOS Keychain, the Secret Service on Linux or DPAPI on Windows, else a file.
The CLI on Windows and macOS
reliquary run starts npm, npx and pnpm shims on Windows, and the CLI's tests run on Linux, macOS and Windows.
Rate limits on sign-in and MCP
Limits per address, email, session, client, token and CLI sign-in on sign-in, OAuth, invites, MCP, the env API and forms.
In progress 4
A week of real use for the core
One vault used from ChatGPT, Claude Code and Hermes for a week, canon approved in the browser.
A week of real use for variables
Projects run with reliquary run and no local .env for a week.
Move to reliquary.redmage.cc
The website and docs at reliquary.redmage.cc, the web app at app.reliquary.redmage.cc and MCP at mcp.reliquary.redmage.cc; clients sign in again once.
Email from the product domain
Sign-in codes and invites sent by email from Reliquary's own domain.
Planned 12
Publish the CLI to npm
@reliquary-ai/cli on npm, so npx works everywhere without a checkout.
Shared connections
A vault holds connections to remote MCP servers; agents use their tools and never see the key.
Tool grants per connection
Each connection's tools allowed per role, with writes off until an owner turns them on.
Routines
Declarative automations on a schedule or a change, running with nobody's machine on.
Routine watchdog
Missed, failed and timed-out runs are recorded and their owner is told.
Per-member variable grants
Choose which members may use which environments, beyond their role.
Credential requests
Ask a client for named credentials; they fill a form instead of emailing them.
Emergency access
A trusted member can request owner access, granted after a waiting period unless declined.
Git mirror
Every canon change committed to a git remote you choose, one way by default.
Version history and restore
Browse a file's earlier versions and restore one.
Fuller export
Exports with the log, earlier versions and proposals, and reliquary export from the CLI.
Chat surfaces
Use a vault from a group chat, starting with Telegram, showing only what everyone present may see.
Considering 8
Billing and plans
Paid plans with their limits enforced in the database, through a merchant of record.
Public status page
Uptime of the web app, the MCP endpoint and the database, in public.
Client-side encrypted variables
Values only your members' keys can open, so the operator can't decrypt them.
Semantic search
Find files by meaning, not only by shared words.
Approver groups
Quorums like one approval from legal and one from engineering.
Member names over MCP
Let agents address co-members by display name, without learning email addresses.
Service agents
Headless agents with their own grants that belong to the vault, not a person.
SSO
Sign in through your company's identity provider.