Getting started

Let your AI set up manage-env

Copy one prompt for your AI coding tool, then complete the few trust steps that must happen in your own terminal.

One-time terminal setup

These steps change your local machine or prove your identity, so you run them yourself. You do not need to paste passwords, email codes, or secret values into chat.

Install the public CLI

The installer supports macOS and Linux and verifies the downloaded binary.

curl -fsSL https://manage-env.com/install | sh
Create an account or sign in

Use signup for a new account or login for an existing one. Enter your email code and password only in your terminal.

menv signup # or: menv login
Connect from the repository root

This registers the local menv MCP server for Claude Code and Cursor and adds the safety guide to AGENTS.md.

menv connect
Restart your AI coding tool

Restart it completely so the new MCP server loads. Approve the menv server if your tool asks.

What the AI handles next

After the restart, paste the prompt from the top of this page into a new conversation. The AI follows this order and reports status and key names, not values.

detect_required_keys

Find required environment variables

Scans .env.example and classifies what can be generated and what needs you.

init_project · setup_project

Create the project and safe values

Binds the repo, generates random secrets and keypairs, and fills non-secret defaults.

request_value_from_user

Ask you only for provider-issued values

Stripe keys, database URLs, and similar values go into a local terminal prompt that the AI cannot read.

run_with_secrets · sync_to_target

Run the app and sync approved targets

Uses values without returning them, then reports only the result, duration, target, and key names.

Where secret values go

The boundary is simple: the AI coordinates the work, while trusted local paths handle values.

AI chat and tool results

They receive status, key names, and next steps. Do not paste a secret value into chat.

Your terminal and local process

You enter provider-issued values locally. manage-env decrypts and injects values only when an approved process needs them.

manage-env server

It stores encrypted data and value-free metadata. It does not receive the plaintext values needed to decrypt your vault.

Troubleshooting

The menv command is not found

Add $HOME/.local/bin to PATH, open a new terminal, and run menv --version again.

The AI cannot see menv tools

Run menv connect again from the repository root, restart the AI tool, and approve the menv MCP server if prompted.

The AI says a value needs you

Wait for the local terminal prompt and paste the value there. Never reply with the value in chat.

Ready to connect your first repository?

Individual accounts are free. Create an account, then return here and copy the setup prompt.

Create a free account