Envoy

Keep every secret in the right hands 

Store your team's environment variables encrypted, organized by team and project.

Pull them anywhere with one command.

Get startedSign in

WORKS WITH YOUR WHOLE STACK

GitHub Actions
Docker
Vercel
Kubernetes
GitLab CI
Node.js
Python
Railway
Any shell
Next.js

We help development teams share secrets safely across every environment, control who can change them and ship faster without pasting .env files into chat ever again.

Everything your
team needs

Secrets,
handled properly

How teams keep their environment variables out of chat and in one place.

Create an organization

API_BASE••••

SENTRY_DSN••••

RoleViewer

Contractors got read-only access to staging, and nothing else

VIEWER ROLE

$ curl …/production200

DATABASE_URL••••

REDIS_URL••••

CI pulls production values with a scoped personal token

API TOKENS

priya changed2 keys

leo addedSAM

ana revokedtoken

Every change shows up in the audit log, without the values

AUDIT LOG

Expires in1h

Variables6

Encryptedyes

A one-off .env shared with a link that expires in an hour

TEMPORARY LINK