A sealed file is a header of recipient stanzas over a streaming payload. A passphrase, a public key, an SSH key the reader already has, a post-quantum hybrid, or a key inside a token — all in one header. No key ring, no trust model, no key server: a format, not a vault.
This is the homepage, the guide, and the tour, in one. Type a command; moonseal itself answers, built to JavaScript: every file it prints is an age file, and opens with any other age implementation.
Commands: help · install · keygen [--pq | --tag | --tagpq] · seal --pass "PW" "MSG" [--work N] · seal --to age1… "MSG" · seal --me "MSG" · seal --pq "MSG" · seal --tag "MSG" · seal --ssh "ssh-ed25519 …" "MSG" · open --pass "PW" · open --with AGE-SECRET-KEY-… · open --me · open --pq · open --tag · inspect · recipients · ssh · tag · armor · stream · custom · api · clear