noy-db is built for full-stack development by AI agents. It gives them one small, tested way to store, share and transform data securely, on mobile, at the edge, offline or online, on servers and in clouds, or any mix of those, so agents write less code and spend fewer tokens, and people spend less time validating security-critical code.
An encrypted, offline-first document store that runs inside your application. Each record is sealed with AES-256-GCM, with per-user keys derived through PBKDF2, before it reaches any storage. A breached server, a copied disk or a subpoenaed provider holds only ciphertext. There is no noy-db server to trust.
Teams share a vault through five roles, from owner to client, with permissions per collection and key rotation when someone leaves. No authentication server is needed: the keyring travels with the data.
- Apache-2.0, published on GitHub in September 2026
- Version 0.10, pre-release: public APIs may still change before 1.0
- 0 runtime dependencies in 51 of its 57 packages
- About 95 kB gzip for a basic app
- Runs in browsers, Node, Bun, Deno, Workers, Electron and mobile web apps
- More than 1,000 tests. No third-party cryptographic audit yet; one is planned before 1.0
import { createNoydb } from '@noy-db/hub'
const db = await createNoydb({ user: 'alice', secret: 'correct-horse-battery-staple' })
const invoices = (await db.openVault('acme')).collection('invoices')
await invoices.put('inv-001', { id: 'inv-001', amount: 1200 })
await invoices.get('inv-001') // { id: 'inv-001', amount: 1200 }