EnvManager

EnvManager is a hosted tool for storing and sharing environment variables and secrets across a team. Variables are organized by organization, project and environment (development, staging, production or custom), so each environment keeps its own values.

Plain config values and secrets live side by side. Variables marked as secret are encrypted at rest with Supabase Vault and only revealed to members and tokens that have access. Access is granted per environment, so someone can work on staging without seeing production. Every change is recorded in an audit log.

The envmanager CLI pulls variables into local development, pushes existing .env files, and validates configuration. The run command injects secrets into a process without printing them, so scripts and AI coding agents can use a secret without seeing its value.

Variables can be synced to Vercel, Railway, Render, Dokploy, Coolify, GitHub Actions, Google Cloud and AWS Secrets Manager. Proxy functions let a front-end call a third-party API without shipping the API key to the browser.

There is a free tier. The paid plan is one flat price per team with unlimited members, with a 7-day trial and no credit card required.