Documentation Index

Fetch the complete documentation index at: https://envcp.org/docs/llms.txt

Use this file to discover all available pages before exploring further.

​

EnvCP Documentation

​

What’s New in v1.2.0

• Security Audit Fixes: All High and Medium severity findings addressed including CORS bypass prevention, backup auto-restore hardening, Windows command injection protection, and config file permission hardening
• Advanced Memory Hardening: Zero-sensitive memory buffers, mlock protection, core dump prevention
• Brute-Force Protection: Progressive lockout system with exponential backoff delays
• Python Package Work: Python wrapper support today, with Rust core work in the repository
• Auto-Startup Service: System service installation with envcp service install
• Enhanced API Key Enforcement: Stricter validation and rotation policies
• Config Integrity Protection: Digital signatures and tamper detection
• Release Channels: Beta and canary release tracks for early testing

​

Quick Navigation

​

Getting Started

• Installation
• Quick Start Guide
• Configuration

​

Platform Guides

• Claude Desktop / Cursor / Cline (MCP)
• ChatGPT / OpenAI API
• Gemini / Google AI
• Local LLMs (Ollama, LM Studio)
• REST API

​

Advanced Topics

• Security Best Practices
• AI Access Control
• Session Management
• Troubleshooting

​

Reference

• CLI Commands
• Configuration Options
• API Reference
• Server Modes

​

What is EnvCP?

​

Key Features

• Local-only storage - Your secrets never leave your machine
• AES-256-GCM encryption - Military-grade encryption at rest
• Reference-based access - AI references variables by name, never sees values
• Multi-platform support - Works with Claude, ChatGPT, Gemini, local LLMs, and more
• AI access control - Granular control over what AI can access
• Session management - Unlock once, work seamlessly
• Automatic .env sync - Keep your .env files up to date
• Memory hardening - Zero-sensitive buffers, mlock protection, core dump prevention (v1.2.0+)
• Brute-force protection - Progressive lockout with exponential backoff (v1.2.0+)
• Python package support - Python wrapper today, with Rust core work in-repo (v1.2.0+)
• Auto-startup service - System service installation for always-on availability (v1.2.0+)

​

How It Works

1. You store secrets - Add your API keys, database URLs, and other secrets to EnvCP
2. AI references by name - When AI needs a secret, it asks for it by variable name
3. EnvCP handles access - EnvCP checks access rules and provides values only when appropriate
4. Values stay encrypted - All data is encrypted at rest with your password

​

Why EnvCP?

• Hardcoding secrets - Insecure and easy to accidentally commit
• Pasting secrets in chat - Exposes them to AI providers and chat logs
• Manual .env editing - Tedious and error-prone

​

Quick Start

# Install globally
npm install -g @fentz26/envcp

# Initialize in your project
envcp init

# Add your first secret
envcp add API_KEY --value "your-secret-key"

# Start the server (auto-detects client type)
envcp serve --mode auto --port 3456

​

Platform Compatibility

​

Support

• GitHub Issues: Report bugs or request features
• Security Issues: contact@fentz.dev

​

License