Docs · beta

Everything you need to use Ghostdrive today.

Access, your vault, your AI workforce, your node — and how it stays private. Only what ships; the rest is marked as planned.

Get access

No wallet is needed to enter. Choose one of three doors:

Passkey (Touch ID, Face ID, Windows Hello or a security key). Create an account and write down the 24 recovery words it gives you.
Recovery words: type the 24 words on a new device to open the same account.
This computer (desktop app): the key lives in the system keychain and the app opens on launch.

A wallet is linked later from Settings → You → Wallets (Trust, Phantom, MetaMask, Coinbase, Rainbow, OKX). Linking signs a free message, sends no transaction, and is bound to this site's domain. You need a linked wallet for DRIVE, the DAO, payments and an alias. On the desktop app the signing happens in your browser and the proof returns to the app.

The wallet door (signing in with a wallet directly, with no account yet) is token-gated during the beta: that wallet needs at least 1 DRIVE on Base. No DRIVE yet? Apply for the beta airdrop. We never ask for a seed phrase or a private key.

Your Vault

The Vault is where your files live. They are split into blocks and encrypted in your browser before anything leaves the device.

Unlock

Passkey — Face ID, Touch ID or a security key. The fastest way back in.
24 recovery words — write them down once; they restore the vault on any device.
Wallet — older vaults unlocked by a wallet signature still open the same way.

Store and share

Drop files into the Vault. Each one becomes sealed blocks plus an encrypted manifest.
Share cap copies a capability: drive369:v3:<cid>:<key>. Whoever holds it can read that one file — nothing else.
Paste a capability someone sent you to open their file.

Keep your recovery words offline. Nobody — including us — can recover a vault without them or one of your passkeys.

Wise Office

A private AI workforce for a company.

Set up the company — name, goals and what the business does. Every agent inherits it.
Hire agents — type a role; the agent studies the company and installs its skills.
Feed the data room — files, notes and links become knowledge the team shares.
Approve — spending, legal and outside communication wait for a human yes in the approval inbox.

Companies, agents, tasks, approvals and documents are stored in an encrypted document inside your vault and sync only between your own devices. Model calls go to the private model on your device, your own node, or your API key, in the order you set in Settings → AI; nothing passes through a Ghostdrive server.

Nodes

Nodes are what keep your data alive.

This device — its connection to the swarm and the blocks it holds locally.
Your node — the Ghostdrive node on your own computer. It holds copies of your blocks and serves them to your other devices.
Backup node — a node that keeps your vault and a copy of every file, so a new device recovers everything.

Run a node (command line)

node packages/node/dist/cli.js init
node packages/node/dist/cli.js daemon
node packages/node/dist/cli.js add ./file.pdf     # prints a read capability
node packages/node/dist/cli.js get <capability>

The desktop app runs the node for you and opens the vault from the computer's keychain. Devices find each other through a node they can both reach: your own today, the first public relay next. Storage-provider mode (ghostdrive provider setup) works against test contracts; the storage market is not live.

For developers

Package	What it is
`@ghostdrive/protocol`	Chunking, AES-256-GCM, CIDv1 blocks, manifests, capabilities, storage proofs — browser and Node, one runtime dependency
`@ghostdrive/swarm`	libp2p block exchange, verifying block stores, browser peer (WebSockets, WebRTC via relay)
`@ghostdrive/node`	The daemon and CLI, provider automation
`packages/contracts`	StorageEscrow and RegistryAnchor (Hardhat; not deployed or audited)

Build and test

npm install && npm run dev
npm test
cd packages && npm install && npm run build && npm test

Configuration

VITE_GHOSTDRIVE_BOOTSTRAP — swarm bootstrap multiaddrs
VITE_REGISTRY_ANCHOR_ADDRESS, VITE_BASE_RPC_URL — the registry light client

An MCP memory server for agents is on the roadmap. The protocol is specified in the whitepaper.

Security & privacy

Keys never leave your device. Files are encrypted before upload; nodes, relays and gateways only see sealed blocks.
Verify, don't trust. Every block is re-hashed against its address on arrival.
No admin access. There is no admin role and no back door by wallet address.
What a server sees. There is no Ghostdrive AI server. A node or relay sees connection addresses, sealed blocks and opaque rendezvous keys; the DRIVE check is a read of the token contract from your browser, cached for five minutes.
Forms. The beta and contact forms send what you type, only when you press the button.

Found a problem? Report it privately through GitHub's security advisories on the repository. Do not open a public issue.