# NMTS

> Cloud storage that encrypts on your own machine -- in the browser, or in the command-line
> tool -- and stores the pieces on Walrus, a public storage network. There is no email address
> and no name on an account: one account code derives every key, and the server never sees it.

This file is for programs and for agents. Every line below is something that exists today and
the address where it lives.

## What it is, and what it is not

- Non-custodial, end-to-end encrypted: files are encrypted on the user's device before upload and
  the operator cannot read them. The server holds ciphertext, file count, sizes and timestamps.
- NMTS charges no fee. Storage is bought from the Walrus network, for a fixed period, from the
  user's own wallet; nothing is paid to NMTS. It is not a subscription and not a prepaid plan.
- Credits are free storage: a donation pool pays the network for a first amount (the weekly free
  trial). They are not sold.
- Built and run by one developer: https://github.com/needmoretruth (needmoretruth). There is no
  company behind it.
- The encryption engine, the command-line tool and the recovery program are open source
  (Apache-2.0); the server and the web app are not published. Addresses under "Published source".
- No email address, no name, no password reset: the account code is the account.
- Update history: https://nmts.me/updates

## Use it from a terminal

- Install: npm install -g github:needmoretruth/nmts-cli
- The command is `nmts`. It runs on Node 22 or newer, and does from a terminal what the browser
  does: uploads and downloads, folders and listings, sharing, credits and the wallet, and the
  recovery files.
- `nmts env` reports what the machine is and where a credential may be kept; it asks the server
  nothing, so it is the first command to run somewhere unfamiliar.
- Source, README and released builds: https://github.com/needmoretruth/nmts-cli
- Written to be read by an agent rather than by a person -- what to call in what order, and where
  a person has to decide: https://nmts.me/agents.md (the same document in the repository: https://github.com/needmoretruth/nmts-cli/blob/main/AGENTS.md)

## Use it from an agent that speaks MCP

- `nmts mcp` serves this account's commands as MCP tools over stdio. Twenty of them, on the
  machine it is started on; nothing about it is hosted.
- Claude Code and Codex each take it in one line, and the line is the same:
  claude mcp add nmts -- nmts mcp --out ~/nmts
  codex mcp add nmts -- nmts mcp --out ~/nmts
  opencode mcp add nmts -- nmts mcp --out ~/nmts
- opencode has no command for it; the entry goes in `opencode.json` as
  `{"mcp":{"nmts":{"type":"local","command":["nmts","mcp","--out","~/nmts"]}}}`.
  Any other client takes the same command and arguments in its own shape.
- Sign in first (`nmts login`). The server reads the account code the machine already keeps and
  never takes one on a command line.
- Three things stop and ask a person once per machine: spending money, anything that cannot be
  undone, and the account code going anywhere outside the tool's own locked file.

## The HTTP API

- The server speaks HTTP at https://nmts.me/v1.
- An agent key, made on the account screen, is what opens it. A key does only what was ticked when
  it was made: read what is stored, upload and delete files, buy storage with credits. It does not
  reach the account screen, the signed-in devices, or anything that cannot be undone.
- A key is not the account code. The key opens the server; the key that opens the files is derived
  from the account code, which is why a key alone reads ciphertext.
- There is no separate endpoint reference. The command-line tool's source is the program that makes
  those requests.

## Published source

- https://github.com/needmoretruth/nmts-cli -- the command-line tool.
- https://github.com/needmoretruth/nmts-recovery -- one executable for Linux, macOS and Windows that rebuilds files from
  the storage network with no NMTS server involved.
- https://github.com/needmoretruth/nmts-crypto -- the Rust library the browser and the recovery program both use, with the
  format documents beside it.
- All three are Apache-2.0 (AGPL-3.0 until 30 August 2026).
- The server and the web app are not published.

## Pages

- https://nmts.me/source -- the three above, and the API, in prose.
- https://nmts.me/faq
- https://nmts.me/terms and https://nmts.me/privacy
- https://nmts.me/security -- how to report a fault, and what happens next.
- https://nmts.me/stats -- what the service is holding, counted.