Skip to content
kovra kovra

Release notes

The highlights below are by version, newest first. See Installation to get kovra.

v0.9.1 — Maintenance

Section titled “v0.9.1 — Maintenance”
  • The menu-bar app and the Dashboard now show the running kovra version, so you can tell at a glance which build you’re on.
  • Polish to the agent-initiated intake flow and internal packaging/build fixes. No change to the CLI surface or security model.

v0.9.0 — Agent-initiated intake · Windows Beta

Section titled “v0.9.0 — Agent-initiated intake · Windows Beta”
  • Agent-initiated intake. An agent can now request a secret it needs but you haven’t stored — naming only the coordinate, never a value — and you fulfil it out-of-band. The value never enters the model’s context. Fulfil from the new macOS menu-bar app, the Dashboard, or kovra intake at the terminal. See Agent-initiated intake.
  • Windows (Beta). kovra runs natively on Windows — Windows Hello, Credential Manager, owner-only ACLs, a governed ssh-agent over named pipes, and an MSI installer. macOS on Apple Silicon stays the reference platform; see Platform support.
  • Dashboard. A lock latch that reveals nothing until you re-authenticate, a --persistent mode that locks on idle instead of shutting down, and a native window on macOS. See the Dashboard.
  • kovra run --stdio for wrapping interactive processes and stdio MCP servers.

v0.8.0 — Public debut

Section titled “v0.8.0 — Public debut”
  • kovra made its public debut. Download the CLI installer from kovra.sh, and install the MCP server from PyPI. The documentation site (this site) launched here.

v0.7.0 — AWS provider

Section titled “v0.7.0 — AWS provider”
  • AWS Secrets Manager references (aws-sm://), the second cloud provider alongside Azure Key Vault. See Cloud references.

v0.6.0 — Dashboard v2 · attended confirmation · key backup

Section titled “v0.6.0 — Dashboard v2 · attended confirmation · key backup”
  • A productionized Dashboard, kovra confirm as a standalone attended confirmation primitive, and master-key backup/restore (kovra key export / import).

Earlier versions built the core: the local vault, sensitivity policy, process injection, the MCP server, native Touch ID, cloud references, and typed credentials (TOTP, keypairs, the governed ssh-agent).