Question 1

What is a one-time secret link?

Accepted Answer

A one-time secret link is a URL that contains an encrypted secret payload. The secret is encrypted in your browser using AES-GCM-256 before transmission — the server never sees your plaintext. When the recipient opens the link, their browser decrypts the secret locally, and the server record is permanently destroyed. A second attempt to open the same link returns 410 Gone.

Question 2

Can I use Zephr to share secrets between services?

Accepted Answer

Yes. Zephr is designed for exactly this: passing secrets between independent services, agents, or pipelines without shared infrastructure. One service calls createSecret, receives a one-time link, and passes that link to another service through any channel — a message queue, API response, or task payload. The receiving service calls retrieveSecret to consume the secret, which is then permanently deleted.

Question 3

How does Zephr work with AI agents?

Accepted Answer

Zephr is built for agent-to-agent credential handoff. An orchestrator agent creates a one-time secret link containing a credential or API key and passes the link to a downstream agent through any channel. The sub-agent retrieves and consumes the secret. The credential never lives in shared logs, environment variables, or the orchestration layer. SDKs are available for JavaScript/TypeScript (npm install zephr) and Python (pip install zephr), plus a REST API and CLI.

Zephr — Share secrets
without the spyware.

Secret Link Created

Zephr — Share secrets without the spyware.

Secret Link Created

Zephr — Share secrets
without the spyware.