Keycast: Remote Nostr Signing Platform for Teams

Keycast is a secure remote signing and permissions management tool for teams using the Nostr protocol.

Keycast: Remote Nostr Signing Platform for Teams
  • "Announcing Keycast. A remote signing platform for teams," announced JeffG.
  • Keycast is designed to simplify remote signing and secure key management for teams utilizing Nostr. While previous solutions like nsec.app, Knox, and Amber cater to individuals, Keycast focuses on team collaboration. It allows users to manage keys collectively and establish policies and permissions to control who can sign and what they are allowed to sign.

Keycast allows users to:

    • Manage teams of Nostr users.
    • Manage multiple keys that you want to give others access to.
    • Create authorizations for those keys that grant specific permissions that can be changed, revoked, etc.
    • Create your own custom permissions.
    • Run the signing infrastructure without any extra work.
0:00
/7:31
  • This project is fully open-source and will provide users with two options: hosted version, which requires no management of personal deployment, and options for individuals to run their own independent instance using Docker, StartOS, or Umbrel.
"Keycast is meant to be run on your server, by you. I think it's tremendously important that this sort of tool doesn't exist as a hosted service (which would basically be a huge key honeypot over time)," said the developer.
  • The application functions as both a management web app and a backend system. It oversees various sub-processes that monitor remote signing requests, validate permissions, and execute signing events.

Key features

  •  NIP-98 HTTP Auth based web application and API authentication.
  •  Team management (create teams, manage stored keys, manage users, manage policies). Supports multiple teams per user.
  •  Secure key management (row-level aes-256 encryption, file or aws kms backed key storage).
  •  Permissions and policies (flexible, extensible permissions model).

What's next

  •  NIP-46 Remote signing for managed keys.
  •  Docker based deployment.
  •  StartOS service.
  •  Umbrel app.
  •  CLI for managing teams, keys, users, and policies.

Announcement / Archive
GitHub Repo