BoxOwl sees the form
The extension reads the field labels, types, and context. Even on single-page apps and dynamically rendered forms.
Name
Email
ZIP
Detected · 9 fields
Everything you fill out, in one private place.
BoxOwl is your personal stack — your secrets, your data, and the AI tools you already use. Universal autofill, a public profile you control, per-field privacy. One source of truth.
Forms ask for everything. You fill them once.
The browser extension reads the form, asks you, and fills it. You stay in control — per field.
You pick which values
Field-level pickers: which address is this — home, work, billing? Defaults are smart; the choice is yours.
Address
Home
Work
Ship
One tap to fill the rest
All matched fields populate, with a subtle highlight as confirmation. Wrong field? Edit inline. Nothing leaves your device that you didn't approve.
Name
Email
ZIP
Filled · 2.1s
Cards bound to addresses you recognize
Your saved cards are tied to the addresses in your vault — yours, your household's, family, friends, even one-time gift destinations. At checkout a merchant can ask BoxOwl "is this card+ship-to combination one this shopper recognizes?" and get back a yes / no / step-up answer with a signed receipt — without ever seeing your identity or address. A stolen card can't be shipped to a thief. Shared cards just work: every co-owner's address book is part of the trust universe. How the Trust Triangle works →
Your page at boxowl.me/u/{handle}.
One link that holds your bio, contact, and the things you choose to show. Style it your way, share via QR.
Connect any AI agent to your vault.
One scoped token. The assistant talks to your local-vault daemon over MCP (or REST for ChatGPT-style hosts) — your secrets never leave your machine in plaintext.
Claude Desktop
Edit one JSON file. MCP-native. Setup walkthrough →
Claude Code (CLI)
One command: npx @boxowl/skills add. Setup walkthrough →
Cursor
MCP-native code editor. Skills installer handles the config. Setup walkthrough →
VS Code Copilot
GitHub Copilot's MCP host in VS Code. Skills installer knows about the servers key quirk. Setup walkthrough →
Hermes Agent (Nous Research)
The recommended fully-local orchestration partner. Hermes Agent runs Hermes on your hardware and talks to BoxOwl over MCP — vault + audit stay local. Setup walkthrough →
ChatGPT
Custom GPT with BoxOwl's REST API as an Action. No MCP needed. Setup walkthrough →
Also works one-shot via @boxowl/skills on Windsurf, Codex, and Gemini CLI —
see all hosts.
The substrate behind every section.
Three guarantees that work the same way no matter which section you're touching: one structured vault, per-field visibility on each row, encrypted local sync you can take with you.
The vault
Passwords were just the start. BoxOwl holds the rest of your digital identity too.
🔒
Logins
Per-site, generated, autofilled, with breach alerts.
Authenticator
TOTP codes built in, alongside the account they protect.
Identity
Name, birth date, citizenship, photo, pronouns.
Addresses
Tag by relationship — self, household, family, friend, colleague, gift recipient, one-time. Batch-add holiday shipping for the season and auto-revoke when it's over.
🔒
Payment Methods
End-to-end encrypted cards. We can't read them. Bound to addresses you recognize — merchants confirm without seeing them. Shared cards just work.
Emails
Primaries, per-purpose, all in one place.
Phones
E.164 formatted, with primary flags.
Work History
Roles, dates, exports as resume or JSON.
🔒
Secure Notes
E2EE notes for licenses, recovery keys, anything sensitive.
Personal Links
Personal links page — one shareable URL for everything.
Preferences
Sizes, dietary, style, anything you'd repeat at checkout.
Vehicles
VIN, plate, insurance, registration.
Documents
License, passport, IDs — securely attached.
Travel Documents
KTN, redress, visas — expiry tracked.
Loyalty Programs
Account numbers, tiers, perks — masked at rest.
Pets
Name, breed, vet — with photo.
Per-field privacy
Private. Public. Or shared.
Every field has its own visibility. Revoke anytime. Export, or delete the vault entirely.
Name
Kira James
Public
Handle
@kira
Public
Email
kira@example.com
Shared with 3
Home address
248 Sumac Ave, Portland OR
Private
Card · primary
•••• 4242
Private · E2EE
Birth date
1992-03-14
Private
Sync, offline, portable
Your data, always with you.
Encrypted local cache means BoxOwl works on the train. Full JSON export, anytime. Deletion is one tap.
Offline sync
SQLCipher-encrypted local cache. Delta sync only changed fields. Last-write-wins on conflict.
Full JSON export
Your data, in a portable, structured format. Drop it anywhere; we don't lock you in.
One-tap deletion
Erase the entire vault and any connected org grants. CCPA & GDPR delete obligations satisfied.
did:web identity
A portable, cryptographic identity at did:web:boxowl.me:you. Resolvable, verifiable, yours.
For builders
Building an app that asks customers for their data?
BoxOwl offers two ways to integrate — SMRT for lightweight identity, PDaaS as a full data layer.
Set up your vault once. Use it forever.
BoxOwl is in private beta. Join the waitlist to receive a registration token.