Notary

A native remote signer for Nostr. Not a web app in a window: Zig throughout, drawn by the toolkit itself, with no Electron and no WebView anywhere. Notary keeps your secret key on a machine you control and signs for your apps over NIP-46. The key never leaves the signer unless you ask for it, and nothing signs on your behalf until you have said so: a request shows which client is asking and what it would sign, and your answer stands for that one request, for a day, or always for that client and that kind.

Built on zig-nostr/nostr, and the signer behind Plaza, the native client in the same ecosystem. Nothing here is tied to it: the bunker:// URL works in any NIP-46 client, and Notary neither knows nor cares which one is asking.

Status: early / work in progress. The signer works end-to-end over public relays, including those that require NIP-42 authentication. Downloads are ad-hoc signed (not notarized). See Install.

What it does

_{Real windows, photographed from the running app. Every pixel inside the window is the app's own, so nothing here shows a screen the app cannot draw. The signer pubkey and bunker:// URL come from a stub daemon; no real key appears in any of them.}

Your key is yours to take

A nostr key cannot be replaced. If the only copy is on one Mac, losing the Mac loses the account, so Notary will hand the key back to you: Back up your key, then the passphrase, then one of two forms.

The encrypted key is the NIP-49 ncryptsec1… exactly as it sits on disk. It is still behind your passphrase, so it is safe to keep in a password manager or on paper. Keep the passphrase somewhere else.

The secret key is the nsec1… itself. Anyone who reads it becomes you, for good, so it is there for the case where you need it and says as much when it appears.

The passphrase is required for both, including the encrypted form that does not strictly need it: an unlocked signer is the normal state, and whoever is at the keyboard then is not necessarily the person who set it up. Nothing is kept afterwards, and closing the panel takes the key off the screen with it.

Install

macOS (Apple Silicon):

curl -fsSL https://raw.githubusercontent.com/zig-nostr/notary/main/scripts/install-macos.sh | bash

That downloads the latest release, verifies its SHA-256, installs Notary.app to /Applications (or ~/Applications when that is not writable), clears the download-quarantine flag so Gatekeeper does not stop an ad-hoc-signed build, and opens it.

Notary is ad-hoc signed, not notarized, on purpose. It holds your keys, so the trust anchor is a build you can reproduce, not an Apple signature: every release is built by CI from a tagged commit (.github/workflows/release.yml). Prefer to trust nothing you didn't run? Read the installer and build from source.

Two components, one product

Notary is split into two processes on purpose, so the secret key stays isolated from the user interface:

• daemon/: the headless NIP-46 signer ("bunker"). It holds the encrypted key and is one of two things, never both:

  Standalone, run by this app: a bunker on real relays, where a client proves who it is with its own keypair. That is where a request from another machine, or from somebody else's client, belongs.

  Embedded, started by an app that ships Notary: the private keyholder of that one app. It talks to its parent down a pipe it was handed at startup, on a port the kernel chose, and connects to no relay. Nothing else on the machine can reach it, because there is no name, no path and no well-known port to reach.

  Not both at once, deliberately. A keyholder that any local app can reach has to answer "which app is this", and on the desktop nothing can: file permissions separate users, not apps, so a credential in a file is readable by every app you run.

• gui/: the native desktop approver, built with the Native SDK (declarative markup plus Zig, rendered natively: no WebView, no Electron). It shows each pending request and sends back your answer: allow once, for a day, always, or deny. The key is generated and decrypted inside the daemon; this app forwards a passphrase, and an nsec only when you import an existing key on the setup screen. signer import reads it from the terminal instead, so it never touches the window at all.

Packaged together, one download brings up both as a single macOS .app.

Build

Each component builds independently. See its own README for details:

# daemon (Zig 0.16)
cd daemon && zig build -Doptimize=ReleaseFast

# gui (Native SDK CLI: npm install -g @native-sdk/cli)
cd gui && native build

• daemon/README.md: running the signer, key management, relays, and the approval API.
• gui/README.md: the approval app and how it connects to (or supervises) the daemon.

License

MIT © Sepehr Safari