LOCAL-FIRST · GUI + CLI

Keep small secrets close—and find them fast.

scrap keeps tokens, passwords, and short text on your computer. Find and copy them in the desktop app, or compose them into scripts with the CLI—encrypted at rest, without a cloud account.

Download for Windows Other platforms

Windows · macOS · Linux

scrap

Search scopeAll scopes

Fuzzy

api_tokencloudflare

deploy_hookgithub

account_idstaging

cloudflare / api_token••••••••••••••••••••

CopyReveal

Local-firstEncrypted at restGUI + CLIOpen source

Less scattered. More certain.

Not another password manager. The missing piece in a developer workflow.

When a value must be found by a person, read by a script, and never sent to a cloud or repository, scrap gives it one clear home. No accounts. No sync anxiety. No remote service disguised as a local tool.

01Multi-scope search

Stored is only useful when it is findable.

Search one, several, or every scope. Duplicate keys remain clear because their scope travels with them; values never enter the search index.

02One encryption model

Mask what should stay quiet.

Masking controls the default view, not a different kind of encryption. Showing a value while editing never changes how it is saved.

03Native GUI + CLI

Friendly to people. Predictable for tools.

The desktop app is made for finding and copying; the CLI keeps output clean, exits explicit, and pipelines composable.

04Local-first

Local is the boundary.

Data never detours through a web service. The daemon is the sole authority, values are encrypted in SQLite, and the OS protects the master key.

A small system with hard boundaries

Architecture you can understand is architecture you can trust.

Clients express intent. scrapd owns search, transactions, and encryption, so the GUI and scripts observe the same domain semantics. Internals can evolve; external contracts stay stable.

Desktop GUILocal IPCscrapdAEAD + OS key protectionEncrypted SQLite

One data authority

Neither GUI nor CLI opens the database or holds the master key.

Starts on demand

No permanent system service. A client wakes it; an idle daemon leaves quietly.

Inspectable by design

Open source, versioned protocol, deterministic errors, and release checksums.

Ready to gather the values that matter?

Choose a platform. Know exactly what you get.

The Windows MSI installs the desktop app, CLI, and daemon together; macOS and Linux ship as self-contained archives. Every upgrade preserves existing data.

Windowsx64 · MSI installerDownload for Windows macOSApple Silicon / IntelView macOS assets Linuxx64 · tar.gzView Linux assets

GitHub Releases provides every download with release notes, SHA-256 checksums, and signing status. Unsigned builds may trigger Windows SmartScreen. Code signing policy