nsecBunker implements NIP-46 to provide OAuth-like flows for nostr. Instead of giving your nsec to every application, you run a bunker on trusted hardware and grant revocable, scoped access to clients.
features
- Granular permission control per application
- OAuth-like authorization flow
- Team key sharing for organizations
- LNbits integration for billing
- Audit logging of all signing requests
- Multi-key management
The bunker model is the only sane way to use nostr keys across multiple clients without trusting every app with your identity. I stopped developing it once it started taking off in a way that would have been bad for nostr if it had kept scaling like that — see the changelog for why I killed my own successful product.