Env Var Locker
Let your agent manage and retrieve encrypted environment variables without leaking secrets into chat logs or repos.
Overview
Env-Var-Locker is an MCP server for the Ship phase that manages encrypted environment variables for agents with zero-leak-oriented access.
What is this MCP server?
- Encrypted environment variable manager advertised with zero-leak capabilities
- Remote MCP SSE at env-locker-mcp.vercel.app (v1.0.0)
- Premium settlement via optional EIP-3009 payment-signature header
- Keeps API keys and tokens out of plaintext prompts when agents need config
- Server version 1.0.0 in published MCP manifest
- 1 SSE remote URL on Vercel
- 1 secret header slot: payment-signature (EIP-3009)
What problem does it solve?
Solo builders leak API keys when agents, terminals, and repos all need the same secrets without a safe injection path.
Who is it for?
Indie devs shipping SaaS or APIs who want MCP-driven env access without dumping keys into every agent turn.
Skip if: Organizations already standardized on Vault or cloud secret managers with strict IAM and audit you will not duplicate via MCP.
What do I get? / Deliverables
Agents can work with encrypted env storage so fewer secrets sit in plaintext files and chat history.
- Agent-mediated access to encrypted env variables
- Reduced reliance on plaintext .env in agent sessions
- Configured remote Env-Var-Locker MCP endpoint
Recommended MCP Servers
Journey fit
How it compares
MCP secrets locker integration, not a local .env generator skill or broad compliance audit suite.
Common Questions / FAQ
Who is Env Var Locker for?
Solo builders and small teams using Claude Code or Cursor who need encrypted env vars reachable by MCP without exposing secrets in prompts.
When should I use Env Var Locker?
Use it during Ship and early Operate when you configure staging and production secrets and want agents to reference env values through an encrypted locker.
How do I add Env Var Locker to my agent?
Add https://env-locker-mcp.vercel.app/api/mcp as an SSE MCP server in your agent settings; supply payment-signature only if your plan requires EIP-3009 premium settlement.