AIagentsLab
All products
EnvSave logoSecure

EnvSave: Stop giving LLMs your real secrets.

EnvSave is a free local encrypted vault: your code and AI agents use opaque es_ keys instead of real API keys, so a prompt-injected agent can't leak them. CLI, Node and Python SDKs.

$ npm install -g @envsave/cli

Also on PyPI: pip install envsave

Docs at envsave.comView on npm

Why EnvSave exists

Agents with shell, file and HTTP access can be prompt-injected into leaking your environment files. With EnvSave, agents can use real credentials without ever seeing them, which you need before giving them real autonomy.

A local encrypted vault for API keys, tokens and passwords. Your code and your agents only ever see opaque keys (es_…) that resolve to the real value on your machine.

Key features

  • Opaque keys that can't be reversed or listed
  • Node and Python SDKs, Vercel env push
  • Free and unlimited for local use

What you can do with it

  • Let Claude Code, Codex or Cursor run code that needs API keys without the agent ever reading the key
  • Replace plaintext environment files with opaque references that are safe to commit and paste into prompts
  • Push the same values to Vercel environments from one vault
  • Audit which process resolved which key, and when

EnvSave FAQ

Why shouldn't AI agents see my environment file?

Agents with shell and file access can be prompt-injected by a web page, an issue or a dependency into printing or sending your environment variables. If the agent only ever sees an opaque es_ key, there is nothing useful to leak.

How does EnvSave work?

Values are stored in an encrypted vault on your machine. Your code references them by opaque keys (es_…), and the EnvSave SDK resolves the real value locally at runtime, outside the agent's context.

Is EnvSave free?

Yes, local use is free and unlimited. Install it with npm install -g @envsave/cli or pip install envsave.

Which languages are supported?

There is a CLI plus Node.js and Python SDKs, and a command to push values to Vercel.

Works well with

Hivey

All your AI swarms. One terminal.

Skylls

Share skills, agents and swarms, one private repo at a time.

Get release notes and guides

Occasional email on new versions and how we run agents in production.

Need agents built for your business?

We build the tools above for our own client work. Tell us about your workflow.

Talk to us