ALL SYSTEMS CAVE |
zero trackers · zero cookies open source · agplv3 + mit three devs · one cave hosted in the eu zero trackers · zero cookies open source · agplv3 + mit three devs · one cave hosted in the eu
zéro traceurs · zéro cookies open source · agplv3 + mit trois devs · une cave hébergé en europe zéro traceurs · zéro cookies open source · agplv3 + mit trois devs · une cave hébergé en europe
| PARIS · --:--
corploc CorpLoc
ship it
corploc / tools / shelter-plugins
// tool · stable ·

discord plugins
that respect you.
plugins discord
qui te respectent.

Shelter plugins by CorpLoc — PGPCord for end-to-end encrypted Discord messages, and Catbox Uploader for sharing large files. Privacy-focused client modifications. Plugins Shelter de CorpLoc — PGPCord pour le chiffrement de bout en bout sur Discord, et Catbox Uploader pour partager des fichiers volumineux. Modifications client orientées vie privée.

~/cave · shelter-plugins
# PGPCord — end-to-end encryption in Discord
→ key generated: RSA-4096 (passphrase protected)
→ published to keyserver via Discord OAuth ✓
→ encryption enabled for #general

→ outgoing: "meeting at 3pm"
→ encrypted with 3 recipients' public keys
→ sent as message.txt attachment

→ incoming: message.txt from glider
→ decrypted with private key ✓
→ "meeting at 3pm"

# Catbox Uploader — bypass Discord file limits
→ file: demo.mp4 (128MB)
→ uploading to litterbox.catbox.moe... 100%
→ link: https://litter.catbox.moe/abc123.mp4
$
stars
language
latest version
2
plugins
// 01

how it works

3 steps · no surprises
// 01

install shelter.

Install the Shelter client mod loader — see the shelter docs. Works with Legcord or standard Discord.

// 02

add plugins.

In Discord: Settings → Shelter → Plugins → Add by URL. PGPCord: corploc.github.io/shelter-plugins/pgpcord/ — Catbox: corploc.github.io/shelter-plugins/catbox-upload/.

// 03

configure.

PGPCord: generate a key pair, publish it via Discord OAuth, toggle the lock icon per channel. Catbox: no setup — paste or drag files and pick Catbox vs Discord.

// 02

use cases

2 scenarios

privacy-minded Discord users

Encrypt your DMs and group messages end-to-end. Nobody — not Discord, not admins, not anyone without your key — can read them.

content creators

Share large files (videos, assets, builds) directly in Discord without hitting the file size limit. Catbox Uploader handles files up to 1GB.

// 03

origin story

Discord knows everything — every message, every file, every reaction. PGPCord started because we wanted to have private conversations on a platform that's fundamentally not private. The implementation is pragmatic: RSA-4096 keys, messages encrypted and sent as file attachments to avoid length limits, a keyserver backed by Supabase with Discord OAuth for verification. Catbox Uploader came later — Discord's file limit is annoying, Litterbox is free, the integration took a weekend.

Discord sait tout — chaque message, chaque fichier, chaque réaction. PGPCord est né parce qu'on voulait avoir des conversations privées sur une plateforme qui ne l'est fondamentalement pas. L'implémentation est pragmatique : clés RSA-4096, messages chiffrés envoyés en pièces jointes pour éviter les limites de longueur, un keyserver sur Supabase avec Discord OAuth pour la vérification. Catbox Uploader est venu après — la limite de fichiers Discord est chiante, Litterbox est gratuit, l'intégration a pris un weekend.

// 04

comparisons

honest positioning

Vencord / BetterDiscord

Broader plugin ecosystems with hundreds of plugins. Our focus is narrower — privacy-specific plugins built on Shelter's lighter mod framework.

SimpleX / Signal

If you want real private messaging, use those. PGPCord is for when you need to stay on Discord but want encryption where it matters.

// 05

threat model

PGPCord uses RSA-4096 with passphrase-protected private keys. Messages are encrypted client-side before leaving your machine. PGPCord utilise RSA-4096 avec des clés privées protégées par passphrase. Les messages sont chiffrés côté client avant de quitter ta machine.

  • Private keys never leave your browser — stored in Shelter's plugin store (localStorage)
  • Keyserver only stores public keys — verified via Discord OAuth, hosted on Supabase
  • Messages encrypted for all recipients + self — ciphertext sent as file attachment
  • Editing encrypted messages is blocked to prevent plaintext leaks
  • Catbox uploads are anonymous — no account, temporary links (1h-72h)
// 06

roadmap

what's next
// 07

faq

5 questions
what is PGPCord?
End-to-end PGP encryption for Discord messages. RSA-4096 keys, passphrase-protected. Messages are encrypted for all recipients and sent as file attachments. Only people with the right keys can read them.
what is Catbox Uploader?
Uploads files up to 1GB to Litterbox (Catbox.moe temporary hosting) directly from Discord's chat bar. Bypasses Discord's file size limit. Temporary links (1h to 72h). Blocks dangerous file types.
will this get me banned?
Client mods are against Discord's ToS. Use at your own risk. We've been running these for over a year without issues.
does it work with Discord updates?
Shelter handles injection. Occasionally a Discord update breaks things — we usually patch within 48h.
can i contribute a plugin?
Yes. Fork the repo, use pnpm lune dev <plugin> for development, open a PR. Built with SolidJS and Shelter's reactive framework.
> ESC
↑↓ navigate select esc close