Envcp
Store API keys and env secrets in an encrypted vault while granting your agent policy-bound access instead of pasting .env into chat.
Overview
envcp is an MCP server for the Ship phase that provides an encrypted environment-variable vault with AI access policies for safer agent workflows.
What is this MCP server?
- Encrypted environment variable vault designed for AI agent access with explicit policies
- npm package @fentz26/envcp v1.0.82 with stdio MCP transport
- Keeps secrets out of prompts and repos while still letting agents fetch allowed values at runtime
- GitHub-backed EnvCP project with MCP Registry schema 2025-12-11 listing
- npm version 1.0.82
- Package: @fentz26/envcp
- Transport: stdio
What problem does it solve?
Solo builders pasting .env files into AI sessions leak API keys and lose control over which tools can read production secrets.
Who is it for?
Indie developers using multiple AI agents who need centralized, policy-gated env secrets without a full enterprise vault contract.
Skip if: Organizations that already mandate a team-wide cloud secrets manager with audited RBAC and no local MCP bridge.
What do I get? / Deliverables
After EnvCP is configured, agents retrieve only policy-approved secrets from an encrypted vault, shrinking blast radius during ship and operate.
- Policy-scoped secret retrieval for agents
- Encrypted store separated from repository and chat
- stdio MCP bridge at envcp v1.0.82
Recommended MCP Servers
Journey fit
How it compares
Encrypted secrets MCP vault, not a generic .env linter skill or infrastructure deployer.
Common Questions / FAQ
Who is envcp for?
Solo builders and small teams who automate with AI agents but refuse to keep secrets in chat history or unencrypted repo files.
When should I use envcp?
Use it before ship when hardening access to API keys, and during operate when rotating credentials agents depend on.
How do I add envcp to my agent?
Install @fentz26/envcp from npm (v1.0.82), configure the vault and policies per EnvCP docs, and register the package as a stdio MCP server in Claude Code or Cursor.