envx

CLI-First. Built for developers, by developers.

Sync environment variables, instantly.

Stop sharing `.env` files over Slack. Manage team secrets securely across isolated projects. Onboard a developer in under 2 minutes.

See Workflow View Documentation

AES-256 Encrypted at Rest•GitHub OAuth• 3 Projects per User

bash

~$npm install -g envx-cli-tmr

+ envx-cli-tmr@1.0.14
added packages in 0.85s

Run 'envx --help' to get started.

Ready to deploy

Built for velocity. Engineered for security.

A Git-native command-line suite that integrates into developers' actual workflows without configuration bloat.

2-Minute Onboarding

Invite teammates using just their GitHub username—one command, one invite token. No password management overhead or new auth systems to manage.

envx invite

$ envx invite abc123 john

✔ Generated invite token for @john

Secure by Default

Secrets are encrypted at rest using AES-256-GCM. All communication is secured via TLS 1.3 (HTTPS only). Access is strictly restricted to invited project members.

encryption statusAES-256-GCM

at rest:Encrypted (Project Key)

in transit:TLS 1.3 Strict

Template Generation

Run `envx init` to instantly generate a `.env.example` template from your remote secrets (keys only, no values). Keep configuration templates in sync effortlessly.

.env.examplekeys only

DATABASE_URL=

API_KEY=

WEBHOOK_SECRET=

Full Audit Logs

Track exactly who accessed or modified environment variables, when, and from which device. Ensure compliance and security with zero effort.

envx logsaudit trail

[12:41:02] @john PULL Backend API

[14:15:30] @founder PUSH Backend API

[16:02:11] @john LOGIN via GitHub

Real World Workflow

From zero to developing in 90 seconds.

No complex GUI apps to log into. The founder creates the project and pushes the local `.env`. The developer joins via a token and pulls it. Done.

Project Isolation

Separate teams and environments per project easily.

No Vendor Lock-in

Export secrets anytime. No proprietary password systems.

Full Audit Trail

Trace access history, secrets edits, and team logins in real-time.

1. Founder Setup

$ envx create# Project created: Backend API

$ envx push? Select a project to push secrets to:❯ Backend API# Local .env securely pushed

$ envx invite john# Invitation sent directly to @john (No tokens!)

2. Developer Onboarding

$ envx join? Select an active invitation to join:❯ Backend API (invited by @founder)✔ Joined Backend API!

$ envx pull? Select a project to pull secrets from:❯ Backend API✔ .env file downloaded. Ready to develop!