What is 0nVault
0nVault is a patent-pending encryption and packaging system (US Provisional #63/990,046) that creates secure, portable containers for AI configurations.
Think of it as a "brain in a box" — all the credentials, workflows, environment variables, MCP configs, and AI personality settings packaged into a single encrypted file that can be transferred between systems.
The 7 Semantic Layers
Each .0nv container holds up to 7 layers:
| Layer | Contents | Encryption | |---|---|---| | workflows | .0n workflow definitions | AES-256-GCM | | credentials | API keys, tokens | Argon2id double-encrypted | | env_vars | Environment configuration | AES-256-GCM | | mcp_configs | MCP server settings | AES-256-GCM | | site_profiles | Website configurations | AES-256-GCM | | ai_brain | Personality, K-layers, behaviors | AES-256-GCM | | audit_trail | Transfer history, signatures | AES-256-GCM |
Credentials get double encryption — Argon2id on top of AES-256-GCM — because they are the most sensitive.
Seal of Truth
Every container includes a Seal of Truth — a SHA3-256 content-addressed integrity verification hash:
Seal = SHA3-256(transferId || timestamp || pubKey || SHA3-256(concat(ciphertexts)))
If any byte changes, the seal breaks. You can verify a container is genuine without decrypting it.
Multi-Party Escrow
0nVault supports escrow transfers with X25519 ECDH key exchange:
Use Cases
The CLI
0nmcp vault create # Create a .0nv container
0nmcp vault open # Decrypt and extract
0nmcp vault inspect # View without decrypting
0nmcp vault verify # Check Seal of Truth
0nmcp vault escrow create # Generate escrow keypairs
48/48 tests pass. The system is production-ready.
0nVault is part of 0nMCP v4.5.0. 5 patents pending. Learn more at 0nmcp.com →