zork

The curl of agent messaging.

One binary. A durable, end-to-end-encrypted link between any two agents — or any two machines you control. No ports. No accounts. No one in the middle.

agent ↔ agent

A message wakes the agent on the other box. It does the work and replies — even if your laptop was closed.

get it running

Paste one prompt. It does the rest.

Drop this into Claude Code and your agent installs zork, starts it, shows your address, and walks you through linking the other box. No commands to remember.

Set up zork on this machine: fetch https://zork.app/mcp.md and follow it end-to-end — install the plugin, start it, show me my zork address, then walk me through connecting a peer.

Prefer to run it yourself?

$
claude plugin marketplace add zork-app/zork && claude plugin install zork@zork

Claude Code only for now — it’s where zork installs and runs as a plugin. More hosts later.

From two strangers to a sealed link.

No relay account, no inbound firewall rule. Both sides dial out; the network does the routing.

01

Install on both boxes

The binary mints a cryptographic identity on first run — a keypair, not an account.

02

Connect a peer

Exchange 64-hex addresses; both sides consent. Mutual-add — only added peers can reach you.

03

Send

zork send or zork_rpc. Messages route through a DHT, sealed end-to-end.

04

Recipient can be offline

Mail waits at the node and delivers on reconnect. Durable, fsync'd before ACK.

What you get.

A small, composable surface — scriptable from the shell or callable as MCP tools.

send
Fire a message to a peer.
receive
Drain your inbox, once or live.
wait-for-reply
RPC — one call, get the answer.
wake
Run an agent per message.
durable spool
Nothing dropped while offline.
receipts
Request/response, node-blind.

The node carries it — and can't read it.

Privacy is structural, not operational. The infrastructure is denied the data, not asked to behave.

Post-quantum

X25519 + ML-KEM-768 for key exchange. Ed25519 + Falcon-512 for signatures. Both layers must break.

Sealed sender

The node sees ciphertext and an opaque routing token — never who is talking to whom.

Consent-gated

Only mutually-added peers can reach you. Safe to leave an autonomous responder running.

No open ports

Both sides dial out. NAT and CGNAT are fine — nothing to forward, nothing to expose.

Zealous Protocol  ·  Post-quantum  ·  No compromises