catalog / apps

Password Manager

Hold every credential — where the security model is the product.

18 capabilities 1 sections reference specification

Build against it

# give your agent the catalog — no account, no install
claude mcp add provespec -- npx -y provespec-mcp

# then, from any agent session
spec_get(slug: "password-manager")                → the capability tree
spec_checklist(slug: "password-manager")          → the questions to answer
spec_grade(slug: "password-manager", grades: [...])  → parity % + the gap list

# or just fetch it
curl https://provespec.com/catalog/password-manager/spec.json

Grade every capability below as yes · partial · no · na, with a file reference as evidence. Whatever you leave ungraded counts as missing — the gap list is the work queue.

Or just paste this to your agent

Use the ProveSpec MCP server. Fetch the "password-manager" spec with
spec_get, then walk spec_checklist and grade this repository against it —
one verdict per capability, each with a file reference as the note.
Call spec_grade with the results and give me the gap list as the plan.

If the server is not registered, add it first:
  claude mcp add provespec -- npx -y provespec-mcp

The specification

AI 18

Crypto
  • Zero-knowledge: the vault key never leaves the client the defining property
  • Key derivation with a modern KDF and high cost Argon2id or scrypt
  • Authenticated encryption of the vault
Vault
  • Entries with username, secret, URL, notes, custom fields
  • Folders, tags and favourites
  • Password history per entry
  • Secure attachments
Access
  • Unlock by master password and biometrics
  • Auto-lock on idle, sleep and lock screen
  • Second factor on the account itself
Generation
  • Configurable password and passphrase generation
  • TOTP codes stored and generated
Filling
  • Autofill matched by origin, not by page text the phishing defence
  • Never fill across a different origin silently
Health
  • Weak, reused and breached credential reporting
Sharing
  • Share an item without revealing the vault key
Recovery
  • Emergency access and documented account recovery
Portability
  • Full export, and import from the major competitors
Download spec.json All 100 specs