prick stores secrets in your own Cloudflare account and injects them into processes at runtime. The server is one Cloudflare Worker backed by a D1 database, deployed to your account and operated by you. Values are encrypted with AES-256-GCM and each ciphertext is cryptographically bound to the environment, key and version it belongs to. Identity comes from Cloudflare Access — SSO for people, service tokens for CI. The prk client is a single static binary: "prk run -- ./deploy.sh" hands secrets to a child through its environment block and nowhere else, and every reveal is audited with the reason it happened. A web console and an MCP server ship alongside the CLI.
What's new in 2026.1004.0
What's Changed - docs: put the winget line back now that Microsoft has approved the package by @yashau in #43 - build: update toolchain and dependencies, replace vite-plus with oxfmt and oxlint by @yashau in #47 - docs: bring the docs in line with the code by @yashau in #48 - feat: version the web app on its own app-v release line by @yashau in #49 - fix: keep the Windows session out of the roaming profile by @yashau in #50 Full Changelog: v2026.901.0...v2026.1004.0
fix(cli): read back an environment the server was willing to write by @yashau in #25
fix(cli): give a guard refusal its own code instead of LAUNCH_FAILED by @yashau in #24
fix(deps): override cookie and esbuild past two advisories upstream will not release by @yashau in #26
fix(cli): three findings from a live 2026.819.1 smoke test by @yashau in #27
fix(ci): make the root pnpm lint and check scripts actually run by @yashau in #29
feat(ui): add sign out and stop the idle dialog offering re-authentication by @yashau in #28
fix(ui): card spacing, danger-zone ring, and whole-row links in the lists by @yashau in #30
docs: stop the setup instructions assuming the reader's platform by @yashau in #31
fix(cli): exit 126 for a non-image on Windows, and correct a docs command by @yashau in #32
fix(cli): give an edge mitigation its own code instead of FORBIDDEN by @yashau in #33
ci: gate the docs build on docs/, and openapi.json on js by @yashau in #35
feat(cli): complete a login by pasting the redirect when loopback is unreachable by @yashau in #36
feat(cli): revoke the session on logout instead of only deleting the file by @yashau in #37
fix(ci): stop mise run ci racing bootstrap, and itself, on a fresh tree by @yashau in #38
feat(docs): serve the site from docs.getprick.dev, and nowhere else by @yashau in #39
fix(ci): report the docs URL from the config, not from wrangler's log by @yashau in #40 …
2026.819.2Aug 19, 2026
What's Changed - fix(cli): send the resource indicator Access refuses a login without by @yashau in #22 - fix(cli): stop a unit test reading the developer's own login by @yashau in #23 Full Changelog: v2026.819.1...v2026.819.2
Frequently asked questions
Is prick free?
Yes. prick is free and open-source software released under the MIT license.
What is the latest version of prick?
The latest version is 2026.1004.0, released on Oct 4, 2026.
Is it safe to download prick?
The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with 0adcbc4ffbbca8117efa10e0f655ff7ca86f8a613bfaea2851b91f22fcafdc8f.
Which Windows versions does prick support?
prick runs on Windows and is available for 64-bit (x64), ARM64 systems.
How do I uninstall prick?
Open Settings › Apps › Installed apps, find prick and select Uninstall. From the command line, run winget uninstall --id=yashau.prick -e.
Is there a portable version of prick?
Yes. prick is available as a portable ZIP archive (prk-2026.1004.0-x86_64-pc-windows-msvc.zip, 64-bit (x64)) that runs without installation. Copy it to any folder or USB drive and run it from there.
Alternatives to prick
Other Development kits programs for Windows from different developers.
