# Env

> Manage Convex env vars / secrets (set, wire into actions, never hardcode). TRIGGER on an API-key/secret/env-var request.

- Skill: `get-convex/env-2` (Agent Skill)
- Install (CLI): `npx skillmds@latest add get-convex/env-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/get-convex/env-2/raw
- Safety review: pending (external: skill-scanner PASS, skillspector CAUTION)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: Apache-2.0
- Author: get-convex (https://skillmd.com/u/get-convex)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/get-convex/env-2

---


# Manage env vars + secrets

Store secrets as Convex deployment env vars (npx convex env set), read them with process.env in actions, never commit them.

## Steps
1. `npx convex env set KEY value` (per deployment).
2. Read via process.env.KEY inside actions (not queries/mutations).
3. Never hardcode or commit secrets; add to .env.local only for local.
4. Confirm with `npx convex env list`.

## Rules
- Secrets live in Convex env vars, never in code or git.
- process.env only in actions ('use node' if needed), not queries/mutations.
- Different deployments need their own values.