Welcome to the CriptEnv Documentation

Everything you need to manage your secrets with military-grade security — from the CLI to the dashboard, from the API to CI/CD integrations.

What is CriptEnv?

CriptEnv is an open-source secrets management platform with a Zero-Knowledge architecture. An alternative to Doppler and Infisical, it lets developers and teams manage environment variables, API keys and sensitive credentials with end-to-end encryption.

All secrets are encrypted 100% client-side with AES-256-GCM. The server never receives plaintext data — even with full access to the database, it is impossible to decrypt your credentials.

Exemplo rápido

# Definir um secret
$ criptenv set DATABASE_URL=postgresql://localhost/mydb
$ criptenv set API_KEY=your_api_key_here

# Obter um secret (descriptografado localmente)
$ criptenv get DATABASE_URL

# Listar todos os secrets (valores nunca exibidos)
$ criptenv list

API Principles

Zero-Knowledge

Secrets are encrypted 100% client-side. The server stores only ciphertext — it never sees your real data.

Consistent

CLI and API share the same semantics. What you do in the terminal you can do over HTTP and vice versa.

Secure by default

AES-256-GCM with PBKDF2-HKDF. No plaintext in logs, no token exposure, no data compromise.

Open Source

Open code under the MIT license. Audit, contribute and self-host whenever you need.

What you can do

Manage via CLI

Terminal-first: set, get, list, delete, push, pull — all in your natural development flow.

Sync with the Cloud

CLI and web use the same encrypted remote vault. Push imports files; pull exports to local files.

Manage Teams

Invites, roles (admin, developer, viewer) and granular per-project permissions.

Integrated CI/CD

CI tokens for pipelines. Official GitHub Action. Secrets as environment variables.

Cloud Integrations

Push directly to Vercel, Railway and Render. Sync secrets with your providers.

Secret Rotation

Manual, notify and auto policies. Expiration alerts and rotation history.

Complete Audit Trail

A log of every operation: who, when, what. Filterable by action and resource.

Import/Export

Import from existing .env files. Export as .env or JSON.

REST API

Versioned API with API keys, CI tokens and rate limiting. Complete OpenAPI documentation.

First steps

CLI Installation

Install via Homebrew, pip, or the install script. Support for macOS, Linux and Windows.

Quickstart

In 5 minutes, create your first project and manage your first secrets.

Set up CI/CD

Integrate with GitHub Actions, GitLab CI or any pipeline using CI tokens.

Understand the Encryption

How the AES-256-GCM protocol works with PBKDF2/HKDF derivation.

Learn more about CriptEnv

Security Guide

Encryption protocol, zero-knowledge architecture and threat model.

API Reference

Complete documentation of the REST API endpoints.

GitHub (Open Source)

Open source code, issues, contributions. MIT license.

Support & Community

Get in touch for questions, bug reports or feature suggestions.

llms.txt

Complete documentation index for discovery by LLMs and agents.

Dashboard

Open the web dashboard to manage projects, secrets and team members.