The API follows the specification for native messaging from Mozilla and Chrome. Each JSON-UTF8 encoded message is prefixed with a 32-bit integer specifying the length of the message. Communication is performed via stdin/stdout.
WARNING: This API MUST NOT be exposed over the network to remote hosts. No authentication is performed and the only safe way is to communicate via stdin/stdout as you do in your terminal.
{
"type": "query",
"query": "secret"
}
[
"somewhere/mysecret/loginname",
"somewhere/else/secretsauce"
]
Similar to query
but cuts hostnames and subdomains from the left side until the response to the query is non-empty. Stops if only the public suffix is remaining.
{
"type": "queryHost",
"host": "some.domain.example.com"
}
[
"somewhere/domain.example.com/loginname",
"somewhere/other.domain.example.com"
]
{
"type": "getLogin",
"entry": "somewhere/else/secretsauce"
}
{
"username": "hugo",
"password": "thepassword"
}
{
"type": "getData",
"entry": "somewhere/else/secretsauce"
}
{
"current_totp": "576548"
}
{
"type": "create",
"login": "myusername",
"password": "",
"length": 12,
"generate": true,
"use_symbols": true
}
{
"username": "myusername",
"password": "5^dX9j1\"b5^q"
}
If an uncaught error occurs, the stringified error message is send back as the response:
{
"error": "Some error occurred with fancy message"
}