Getting Started
Envpilot is a secure environment variable manager for teams. Instead of passing .env files through Slack, email, or Git, your secrets live in an encrypted vault with per-variable access control. Pull them into any project with a single command.
Install the CLI#
npm install -g @envpilot/cliOr with bun:
bun install -g @envpilot/cliRequires Node.js 18 or later.
Authenticate#
envpilot loginThis opens your browser to authenticate via SSO. The CLI generates a one-time device code, opens the authentication page, and polls until you confirm in the browser. Tokens are stored locally and refresh automatically.
To skip the browser auto-open (useful in headless environments):
envpilot login --no-browserSet up a project#
envpilot initThis walks you through selecting an organization, project, and default environment. It creates a .envpilot config file in the current directory and adds .env to your .gitignore.
Pull variables#
envpilot pullDownloads variables for the default environment and writes them to .env. To target a specific environment:
envpilot pull --env productionOr do it all in one command#
envpilot syncsync chains login, init, and pull into a single flow. Best for first-time setup.
Open the interactive TUI#
envpilotRunning envpilot with no arguments opens a keyboard-driven terminal dashboard. Browse all commands, read inline documentation, and launch any command directly. The TUI returns after each command finishes, so you can run multiple commands in one session. Press Esc to exit.
Three ways to access your secrets#
CLI — Pull, push, and manage variables from the terminal. Supports .env, JSON, YAML, Vercel, Netlify, AWS, and Docker Compose output formats.
VS Code Extension — Real-time sync inside your editor. Install from the VS Code Marketplace or search "Envpilot" in Extensions. Also works with Cursor.
Web Dashboard — Full management UI at envpilot.dev. Create projects, manage variables across environments, invite team members, assign roles, and view audit logs.