What problem does it solve?
Brings secure local secret management to projects by storing credentials in a private SQLite database and injecting them at runtime, avoiding plaintext files and insecure writes.
Core Features & Use Cases
- Core concept: secrets live in ~/.envault/envault.db and are scoped per project + environment to support multiple deployments.
- Env vault wrapper: envault-run injects secrets into processes at runtime without writing to disk.
- Management patterns: CLI commands for listing, getting, setting, unsetting, and migrating secrets.
- Auditing and hardening: provides audit checklists and deployment patterns for MCP servers and LaunchAgents.
Quick Start
Install envault-manager and envault-run, configure a project, and verify that secrets are injected into the process environment at runtime without creating plaintext files.