handed2me

    Hand it over once. We can’t read it. You get a signed receipt.

    Sealing needs something to hand over and the tick above.

    55 free per day, per network

    This handover: destroyed after 24 hours unopened, shown for 90 seconds once opened. Paid plans choose both and can hand over a file.

    Everything after # stays in the link: a browser never sends it to a server.

    Encrypted on this device before anything is sent.

    How one handover moves

    Encrypted in your browser (AES-GCM).

    The key is made on this page and travels only in the part of the link after #, which a browser never sends to a server.

    What you hand over is stored only as ciphertext. We never get the key.

    What reaches us is ciphertext. No field we accept can hold readable text, and the key is not ours to have.

    Collected once, by whoever holds the link.

    Whoever holds the link can open it, once. The key is checked before anything moves, so a damaged link fails without spending the handover.

    The server copy is destroyed.

    The envelope is moved to the recipient, never copied, and our copy is gone. Payloads never enter a backup.

    A signed receipt returns, verifiable without us.

    Ed25519-signed and hash-chained, it records that the envelope was claimed once and destroyed. Keep the file and its 43-character fingerprint, and it checks out on your own computer.

    For agents

    The same handover over HTTP or MCP, with a scoped API key. Sealing happens in your process, so the server never sees the key.

    Everything else an agent needs is described at /llms.txt and served at POST /mcp.

    POST /api/v1/secrets/ids
Authorization: Bearer ex1_live_…
{"ttl_seconds": 86400}

201 Created
{"url_id": "q3Lr0Kd7…", "tenant_uuid": "…", "expires_at": "…", "ttl_seconds": 86400}

# sealed in your process — the key never leaves it

POST /api/v1/secrets
{"url_id": "q3Lr0Kd7…", "envelope": "ZXgx…", "key_confirm": "…"}

201 Created
{"secret_ref": "…", "receipt_token": "…"}

GET /api/v1/r/{receipt_token}
200 OK
{"demo": false, "receipts": […]}

    Verify without us

    The receipt is a file, and so is the checker: one HTML page that opens from your own disk and is not allowed to make a single connection.

    Download the checker

    handed2me-verifier.htmlconnect-src 'none'
    The file
    handed2me-receipt-7c1e04ab.json
    Your fingerprint
    Xq0p3W7Tz1b9LmVd2KcR8sYfA6hN4uJeG5oQiZrB0wS
    1. Key set matches your fingerprint
    2. Signature valid
    3. Chain intact

    This file holds up Collected

    Plans

    Free within the daily limit. Paid plans are arranged by contact and invoiced. There is no checkout.

    Social-sector rate: 35% lower for care, foundations, municipalities, schools and other government bodies, after your registration is checked.

    The plan list did not load here. It is public at GET /api/v1/plans.

    Paid access opens by contact with us and is invoiced. Accounts are opened with a single-use code, not by sign-up.

    Measured, not certified

    A+ from Mozilla HTTP Observatory for the security headers of our site and API, measured 2 November 2026. The link below shows the current result.

    Hand it over once.

    Back to gate 1

    Account POST /mcp About Privacy Report