Run Citadel.
An encrypted database and memory engine for Windows, macOS, and Linux. Choose a CLI archive, a language binding, or the Studio desktop client.
Citadel Studio.
Open and create encrypted vaults, browse tables and stored memory, run SQL with EXPLAIN and ANALYZE, inspect vectors, and verify integrity.
Windows
x86_64 / MSIPer-user installation with Start menu and uninstall entries. The unsigned installer can show an Unknown Publisher or SmartScreen warning.
macOS
Apple Silicon + Intel / DMGSeparate builds for each architecture. The app is ad-hoc signed, not Developer ID signed or notarized; Gatekeeper can block opening it.
Linux
x86_64 / AppImageA portable desktop app. Mark the AppImage executable before launching; systems without FUSE can use AppImage extraction.
Studio opens on Home; choose Open disposable demo to explore without keeping a vault.
CLI and C/C++ libraries.
The CLI provides SQL, tab completion, backups, integrity checks, and sync. C/C++ archives include the generated header and native libraries.
| Platform | CLI | C/C++ | FIPS-oriented at-rest profile |
|---|---|---|---|
| Linux x86_64 | tar.gz | tar.gz | CLI / C/C++ |
| Linux ARM64 | tar.gz | tar.gz | CLI / C/C++ |
| macOS Apple Silicon | tar.gz | tar.gz | CLI / C/C++ |
| macOS Intel | tar.gz | tar.gz | CLI / C/C++ |
| Windows x86_64 | zip | zip | CLI / C/C++ |
Linux x86_64 CLI archives use musl; C/C++ archives use glibc. The FIPS-oriented profile uses PBKDF2-HMAC-SHA256 with AES-256-CTR for storage. Citadel is not a FIPS-validated cryptographic module or product.
Add Citadel to a project.
Rust
crates.ioThe database API and SQL frontend. Add citadeldb-mem for semantic memory.
Python
PyPI / citadeldbSQL, vector search, memory, and type stubs. The default wheel uses a user-supplied embedder; see Python setup.
WebAssembly
npm / @citadeldb/wasmThe encrypted in-memory database used by the SQL playground.
C / C++
citadel.hA panic-safe C ABI with static and dynamic libraries. Choose an archive in the native packages table.
MCP server
PyPI / citadeldb-mcpA separate executable with local Candle models. Configure a vault and embedder before serving.
CLI from source
Rust 1.95+Build and install the SQL shell with Cargo.
Check the download.
Download the matching .sha256 sidecar from the release assets into the same directory as the archive. A checksum checks file integrity, not publisher identity.
Linux
macOS
On Windows, compare Get-FileHash -Algorithm SHA256 <archive> with the sidecar. For packages with GitHub build attestations, verify them with gh attestation verify <archive> --repo yp3y5akh0v/citadel.