@envyapp/cli

Official CLI for Envy — on-premise secret management platform.

Inject secrets into processes, manage environments, rotate keys and more, directly from your terminal.

Installation

npm install -g @envyapp/cli

Requirements

• Node.js 18+
• A running Envy instance

Quick Start

# One-time machine setup
envy setup --api-url https://envy.company.com
envy login
envy init

# Option A: sync secrets into the linked local file
envy pull dev

# Option B: run a command with secrets injected at runtime
envy run dev -- node app.js

You can also skip saved config for one-off commands:

envy login --api-url https://envy.company.com
ENVY_API_BASE=https://envy.company.com envy pull prod

Authentication

User session:

envy setup --api-url https://envy.company.com
envy login
envy whoami

CI/CD service token:

# Preferred: import a CLI bundle downloaded from the Web dashboard
envy set-token --bundle-file ./envy-token.json

# Legacy token-only mode
envy set-token st_xxxxx

Service tokens are created from the Web dashboard, then imported into the CLI with envy set-token.

Commands

Command	Description
envy setup --api-url <url>	Save the Envy API URL for this machine
envy config show	Show resolved CLI config
envy config get api-url	Read the saved API URL
envy config set api-url <url>	Update the saved API URL
envy login	Authenticate as a user and sync keys
envy set-token	Save a service token or CLI bundle for CI/CD
envy whoami	Show the active actor and backend
envy logout	Clear local credentials
envy init	Link the current directory to a workspace/project
envy pull [env]	Pull secrets from the server into the linked file
envy push [env]	Encrypt and push the linked file to the server
envy run [env] -- <cmd>	Run a command with secrets injected
envy create-workspace	Create a workspace
envy create-project	Create a project
envy create-token	Open the Web-dashboard-based token flow
envy history	View secret version history
envy rotate	Rotate environment master keys
envy audit	View audit logs

Self-Hosting

Envy runs entirely on your own infrastructure. To deploy your own instance, see the envy-deploy repository.

Links

• GitHub
• Deploy guide
• Issues

License

Business Source License 1.1 — Free to use and self-host. Commercial resale or competing products not permitted. Converts to MIT on 2029-01-01.