Envcp
Store API keys and env vars in an encrypted vault and expose only policy-approved values to your AI agent.
Overview
EnvCP is a MCP server for the Ship phase that serves encrypted env vars to agents only under explicit AI access policies.
What is this MCP server?
- Encrypted environment variable vault (EnvCP, @fentz26/envcp v1.1.0)
- AI access policies define what agents may read or inject
- stdio npm MCP server from github.com/fentz26/EnvCP
- Designed to keep secrets out of chat logs and unscoped agent context
- Server version 1.1.0
- npm identifier: @fentz26/envcp
- Transport: stdio
What problem does it solve?
Pasting secrets into agent chats or wide-open .env reads lets models leak production credentials in logs and transcripts.
Who is it for?
Indie builders running MCP agents against staging or prod APIs who need policy-gated secret access without disabling the agent entirely.
Skip if: Hobby projects with only public APIs and no secrets, or enterprises that mandate a single cloud KMS with no custom vault MCP.
What do I get? / Deliverables
After EnvCP is registered, agents pull scoped secrets from an encrypted vault instead of unrestricted plaintext environment dumps.
- Policy-scoped secret retrieval for agent sessions
- Encrypted env store integrated via MCP stdio
Recommended MCP Servers
Journey fit
Secret handling with agent access policies is a Ship security concern—you wire it before production deploys and agent sessions touch real credentials. security subphase catalogs MCP servers that reduce credential leakage and enforce least-privilege access for autonomous tools.
How it compares
Agent-focused encrypted env vault MCP, not a generic dotenv loader skill.
Common Questions / FAQ
Who is dev.fentz.envcp/envcp for?
Solo and small-team builders who use AI coding agents and need encrypted, policy-controlled access to API keys and environment variables.
When should I use dev.fentz.envcp/envcp?
Use it in Ship when agents need real credentials for deploys or integrations and you want to avoid full .env exposure in the model context.
How do I add dev.fentz.envcp/envcp to my agent?
Install @fentz26/envcp (v1.1.0), configure the stdio MCP entry in your agent, set up the EnvCP vault and AI access policies per the EnvCP repository.