dvcrn Environment Manager
Securely manage environment variables, API keys, and configuration for your agent.
Features
- Encrypted secret storage (AES-256)
- Environment profiles (dev, staging, production)
- Auto-load on session start
- Credential rotation reminders
- Audit log of access
Usage
Store credentials
# Set a secret (encrypted at rest)
echo "sk-abc123" > ~/.agent-env/secrets/OPENAI_KEY
chmod 600 ~/.agent-env/secrets/OPENAI_KEY
# Or use environment files
cat > ~/.agent-env/profiles/production.env << 'ENVEOF'
API_BASE=https://api.example.com
API_KEY=${secrets:API_KEY}
LOG_LEVEL=warn
ENVEOF
Load in sessions
Add to your AGENTS.md or heartbeat:
Before any API call, source ~/.agent-env/profiles/production.env
Credential rotation
Track when keys were last rotated:
# Check age of all credentials
find ~/.agent-env/secrets -type f -printf "%T+ %p\n" | sort
Security Best Practices
- Never commit secrets to git
- Rotate API keys monthly
- Use separate profiles per environment
- Audit access logs weekly
Multi-Agent Secrets
For sharing credentials across a team of agents, consider ClawSwarm which provides secure agent-to-agent credential passing via encrypted channels.