# KeyEnv

> KeyEnv is a secrets management platform for developer teams. It provides encrypted storage, syncing, and injection of environment variables across projects, environments, and CI/CD pipelines.

KeyEnv includes a CLI, web dashboard, REST API, and SDKs for 10+ languages. Secrets are encrypted at rest with AES-256-GCM, versioned with full audit trails, and scoped by environment-level permissions (none/read/write/admin).

Every documentation page is also available as raw markdown by appending `.md` to its URL, for example `https://keyenv.dev/docs/cli.md`. The OpenAPI specification is published at `/openapi.yaml` and `/openapi.json`.

## Documentation

- [KeyEnv Documentation](https://keyenv.dev/docs/): Learn how to use KeyEnv to manage secrets across your development workflow.

## Getting Started

- [Getting Started](https://keyenv.dev/docs/getting-started/): Get up and running with KeyEnv in minutes.
- [Installation](https://keyenv.dev/docs/getting-started/installation/): Install the KeyEnv CLI on your machine.
- [Your First Project](https://keyenv.dev/docs/getting-started/first-project/): Create a KeyEnv project and sync your first secrets in under 5 minutes.
- [Core Concepts](https://keyenv.dev/docs/getting-started/concepts/): Understand the key concepts behind KeyEnv.
- [FAQ](https://keyenv.dev/docs/getting-started/faq/): Frequently asked questions about KeyEnv.

## CLI Reference

- [CLI Reference](https://keyenv.dev/docs/cli/): Complete reference for all KeyEnv CLI commands.
- [Authentication Commands](https://keyenv.dev/docs/cli/authentication/): CLI commands for authentication and user management.
- [Project Commands](https://keyenv.dev/docs/cli/projects/): CLI commands for managing KeyEnv projects.
- [Secret Commands](https://keyenv.dev/docs/cli/secrets/): CLI commands for managing secrets.
- [Workflow Commands](https://keyenv.dev/docs/cli/workflow/): CLI commands for development workflow.
- [Full Reference](https://keyenv.dev/docs/cli/reference/): All CLI commands on a single page.

## Web App

- [Web App](https://keyenv.dev/docs/web-app/): Manage secrets through the KeyEnv web interface.
- [Projects](https://keyenv.dev/docs/web-app/projects/): Creating and managing projects in the web app.
- [Environments](https://keyenv.dev/docs/web-app/environments/): Managing environments for different stages of development.
- [Environment Permissions](https://keyenv.dev/docs/web-app/permissions/): Control access to secrets with granular environment-level permissions.
- [Secrets](https://keyenv.dev/docs/web-app/secrets/): Managing secrets in the web app.
- [Secret Rotation](https://keyenv.dev/docs/web-app/rotations/): Automatically rotate database credentials with zero downtime.
- [Teams](https://keyenv.dev/docs/web-app/teams/): Create teams, manage members, and control access to your projects.
- [Service Tokens](https://keyenv.dev/docs/web-app/service-tokens/): Setting up service tokens for CI/CD.
- [Billing](https://keyenv.dev/docs/web-app/billing/): Manage your team's plan, upgrade, and understand usage limits.
- [Profile](https://keyenv.dev/docs/web-app/profile/): View your profile information, manage security settings, review activity, and control your account.

## SDKs & Integrations

- [SDKs & Integrations](https://keyenv.dev/docs/sdks/): Official SDKs and integrations for KeyEnv.
- [API Reference](https://keyenv.dev/docs/sdks/api-reference/): Complete REST API documentation for KeyEnv
- [Node.js SDK](https://keyenv.dev/docs/sdks/nodejs/): Official Node.js/TypeScript SDK for KeyEnv.
- [Python SDK](https://keyenv.dev/docs/sdks/python/): Official Python SDK for KeyEnv.
- [Go SDK](https://keyenv.dev/docs/sdks/go/): Official Go SDK for KeyEnv.
- [Rust SDK](https://keyenv.dev/docs/sdks/rust/): Official Rust SDK for KeyEnv.
- [Java SDK](https://keyenv.dev/docs/sdks/java/): Official Java SDK for KeyEnv.
- [PHP SDK](https://keyenv.dev/docs/sdks/php/): Official PHP SDK for KeyEnv.
- [Ruby SDK](https://keyenv.dev/docs/sdks/ruby/): Official Ruby SDK for KeyEnv.
- [.NET SDK](https://keyenv.dev/docs/sdks/dotnet/): Official .NET SDK for KeyEnv.
- [Bun](https://keyenv.dev/docs/sdks/bun/): Using KeyEnv with Bun applications.
- [Deno](https://keyenv.dev/docs/sdks/deno/): Using KeyEnv with Deno applications.
- [Next.js Integration](https://keyenv.dev/docs/sdks/nextjs/): Use KeyEnv secrets securely in Next.js applications.
- [Django Integration](https://keyenv.dev/docs/sdks/django/): Use KeyEnv with Django applications for secure secrets management.
- [Laravel Integration](https://keyenv.dev/docs/sdks/laravel/): Use KeyEnv with Laravel applications for secure secrets management.
- [Spring Boot Integration](https://keyenv.dev/docs/sdks/spring-boot/): Use KeyEnv with Spring Boot applications for secure secrets management.
- [Rails Integration](https://keyenv.dev/docs/sdks/rails/): Use KeyEnv with Ruby on Rails applications for secure secrets management.
- [GitHub Action](https://keyenv.dev/docs/sdks/github-action/): Inject KeyEnv secrets into GitHub Actions workflows.
- [Secret Scanner Action](https://keyenv.dev/docs/sdks/scan-action/): Scan your codebase for hardcoded secrets in GitHub Actions.
- [Bitbucket Pipelines](https://keyenv.dev/docs/sdks/bitbucket-pipelines/): Inject KeyEnv secrets into Bitbucket Pipelines workflows.
- [AWS Lambda Layer](https://keyenv.dev/docs/sdks/aws-lambda/): Pre-built Lambda Layer that fetches secrets from KeyEnv at cold start.
- [Azure Functions](https://keyenv.dev/docs/sdks/azure-functions/): Load KeyEnv secrets in Azure Functions.
- [Google Cloud Functions](https://keyenv.dev/docs/sdks/google-cloud-functions/): Load KeyEnv secrets in Google Cloud Functions.
- [Netlify](https://keyenv.dev/docs/sdks/netlify/): Inject KeyEnv secrets into your Netlify builds using the CLI.

## API Reference

- [API Reference](https://keyenv.dev/docs/api/): REST API reference generated from the KeyEnv OpenAPI specification.
- [Health](https://keyenv.dev/docs/api/health/): Health check endpoints
- [Auth](https://keyenv.dev/docs/api/auth/): Authentication and user sync
- [Users](https://keyenv.dev/docs/api/users/): User management
- [Teams](https://keyenv.dev/docs/api/teams/): Team management and collaboration
- [Invitations](https://keyenv.dev/docs/api/invitations/): Team invitation management
- [Projects](https://keyenv.dev/docs/api/projects/): Project management
- [Environments](https://keyenv.dev/docs/api/environments/): Environment management within projects
- [Secrets](https://keyenv.dev/docs/api/secrets/): Secret management (encrypted key-value pairs)
- [Permissions](https://keyenv.dev/docs/api/permissions/): Environment-level access control
- [Tokens](https://keyenv.dev/docs/api/tokens/): Service token management for CI/CD
- [Rotations](https://keyenv.dev/docs/api/rotations/): Automated credential rotation for database secrets
- [Scans](https://keyenv.dev/docs/api/scans/): Secret scanning for detecting hardcoded secrets
- [ESO](https://keyenv.dev/docs/api/eso/): External Secrets Operator (ESO) webhook endpoints for Kubernetes integration.
- [Audit](https://keyenv.dev/docs/api/audit/): Audit log access
- [Billing](https://keyenv.dev/docs/api/billing/): Billing and usage information
- [CLI](https://keyenv.dev/docs/api/cli/): CLI authentication endpoints for device authorization flow
- [Account](https://keyenv.dev/docs/api/account/): GDPR and account management

## Guides

- [Guides](https://keyenv.dev/docs/guides/): Step-by-step guides for common workflows.
- [AI Coding Assistants](https://keyenv.dev/docs/guides/ai-tools/): Use KeyEnv with Claude Code, Codex, Cursor, Gemini CLI, and other AI coding tools.
- [CI/CD Integration](https://keyenv.dev/docs/guides/ci-cd/): Integrate KeyEnv with your CI/CD pipeline.
- [GitLab CI/CD](https://keyenv.dev/docs/guides/gitlab-ci/): Integrate KeyEnv with GitLab CI/CD pipelines.
- [CircleCI Integration](https://keyenv.dev/docs/guides/circleci/): Load KeyEnv secrets into your CircleCI workflows using the official orb.
- [Azure Pipelines](https://keyenv.dev/docs/guides/azure-pipelines/): Load KeyEnv secrets in Azure DevOps pipelines.
- [Jenkins](https://keyenv.dev/docs/guides/jenkins/): Load KeyEnv secrets in Jenkins pipelines.
- [Travis CI](https://keyenv.dev/docs/guides/travis-ci/): Load KeyEnv secrets in Travis CI builds.
- [Vercel Integration](https://keyenv.dev/docs/guides/vercel/): Sync KeyEnv secrets to Vercel projects automatically.
- [Railway Integration](https://keyenv.dev/docs/guides/railway/): Deploy to Railway with KeyEnv secrets auto-sync.
- [Render](https://keyenv.dev/docs/guides/render/): Sync KeyEnv secrets to Render services.
- [Fly.io](https://keyenv.dev/docs/guides/flyio/): Sync KeyEnv secrets to Fly.io applications.
- [Cloudflare Workers](https://keyenv.dev/docs/guides/cloudflare-workers/): Sync KeyEnv secrets to Cloudflare Workers.
- [Google Cloud Run](https://keyenv.dev/docs/guides/google-cloud-run/): Sync KeyEnv secrets to Google Cloud Run services.
- [Docker Integration](https://keyenv.dev/docs/guides/docker/): Use KeyEnv with Docker and docker-compose.
- [Kubernetes Integration](https://keyenv.dev/docs/guides/kubernetes/): Sync KeyEnv secrets to Kubernetes using External Secrets Operator (ESO).
- [Terraform Integration](https://keyenv.dev/docs/guides/terraform/): Use KeyEnv secrets in your Terraform configurations.

## Product

- [KeyEnv](https://keyenv.dev/): Secrets management for developer teams: encrypted storage, syncing, and injection of environment variables
- [Features](https://keyenv.dev/features/): CLI, web dashboard, SDKs, CI/CD injection, secret scanning, rotation, and audit trails
- [Pricing](https://keyenv.dev/pricing/): Plans, limits, and what is included in the free tier
- [Comparison](https://keyenv.dev/compare/): How KeyEnv compares to other secrets management platforms
- [Security](https://keyenv.dev/security/): Encryption, access control, compliance, and responsible disclosure
- [Privacy Policy](https://keyenv.dev/privacy/): How KeyEnv collects, uses, and protects personal data
- [Terms of Service](https://keyenv.dev/terms/): Terms governing use of KeyEnv
- [Cookie Policy](https://keyenv.dev/cookies/): Cookies KeyEnv sets and how to control them
- [Acceptable Use Policy](https://keyenv.dev/acceptable-use/): Permitted and prohibited uses of KeyEnv
- [Data Processing Agreement](https://keyenv.dev/dpa/): Data processing terms for customers subject to GDPR

## Blog

- [Vibecoding Is Leaking Your Secrets Into Chat Logs](https://keyenv.dev/blog/ai-vibecoding-secrets-management/): AI coding agents read your .env files, print them into context, and save the transcript to disk. Here's how to vibecode without handing every secret to an LLM.
- [Stop Making New Developers Beg for API Keys](https://keyenv.dev/blog/onboarding-developers-env-setup/): New hire onboarding shouldn't mean a week of Slack DMs asking 'who has the Stripe key?' Fix your env setup in 5 minutes with secrets management.
- [Your Database Password Is 18 Months Old. That's a Problem.](https://keyenv.dev/blog/database-credential-rotation/): Static database credentials are a breach waiting to happen. Here's why automatic rotation matters and how to set it up without breaking production.
- [You Leaked an API Key. Now What?](https://keyenv.dev/blog/leaked-api-key-what-to-do/): A step-by-step guide to containing the damage after exposing secrets in git, Slack, or logs—and how to make sure it never happens again.
- [Stop Hardcoding Secrets in Your CI/CD Pipeline](https://keyenv.dev/blog/secrets-in-cicd-pipelines/): Why secrets in CI/CD are your biggest blind spot—and how to fix it with service tokens, runtime injection, and automated scanning.
- [Your .env File Is a Ticking Time Bomb](https://keyenv.dev/blog/env-file-security-risks/): Why dotenv files are a security risk for teams, and how to stop secrets from ending up in git history, Slack DMs, and shared docs.
- [KeyEnv vs Doppler: Which Secrets Manager Fits Your Team?](https://keyenv.dev/blog/keyenv-vs-doppler/): An honest comparison of KeyEnv and Doppler for secrets management. Pricing, features, and which tool works best for different team sizes.
- [Sync Environment Variables Across Your Team in 5 Minutes](https://keyenv.dev/blog/sync-env-variables-team/): A step-by-step tutorial for sharing secrets securely with your team. Stop pasting API keys in Slack and start using proper secrets sync.
- [How to Secure Your Secrets in Docker Containers](https://keyenv.dev/blog/secure-secrets-docker/): Learn best practices for managing environment variables and secrets in containerized applications without exposing sensitive data.

## Optional

- [OpenAPI specification (YAML)](https://keyenv.dev/openapi.yaml): machine-readable REST API definition
- [OpenAPI specification (JSON)](https://keyenv.dev/openapi.json): machine-readable REST API definition
- [Full documentation as one file](https://keyenv.dev/llms-full.txt): every docs page concatenated as markdown
- [Agent Skills](https://github.com/keyenv/keyenv-skills): skills that teach AI coding assistants to drive the KeyEnv CLI