clavitor/clavis

Clavis

Secure vault platform with multi-client support.

Architecture

Clavis is the vault server. Everything else is a client that talks to it.

Structure

Active Development

Directory	Purpose	Status
clavis-vault/	Vault server with embedded UI (Go, FIPS 140-3)	Active
clavis-crypto/	JavaScript crypto layer	Active
clavis-cli/	CLI for agents	Active
clavis-chrome/	Chrome browser extension	Active

Planned

Directory	Purpose	Status
clavis-firefox/	Firefox browser extension	Announced
clavis-safari/	Safari browser extension	Announced
clavis-ios/	iOS native app	Announced
clavis-android/	Android native app	Announced

Build

make deploy            # Build + test + restart everything
make deploy-vault      # Build + test + restart vault only
make deploy-web        # Build + restart website only
make status            # Check running processes
make logs-vault        # Tail vault logs
make logs-web          # Tail web logs

Clients

The vault supports multiple client types:

• Web: Built-in UI served by vault (clavis-vault/)
• CLI: Command-line tool for automation/agents (clavis-cli/)
• Browser Extension: Auto-fill and TOTP in Chrome (clavis-chrome/)
• Mobile: Native iOS/Android apps (planned)

Security

• FIPS 140-3 validated crypto (BoringCrypto via GOEXPERIMENT)
• Zero-knowledge architecture
• Vault server is the single source of truth

License

Proprietary — © Clavitor