ioenv
Environment Cloud for Developers & AI Teams

Your team's secrets and configs — encrypted, versioned, injected everywhere.

Sign in with GitHub, manage environment variables and secrets through a web dashboard, CLI, or API. AES-256 encrypted, fully auditable, and ready to inject into Cloudflare Workers, Vercel, and more.

Free for up to 5 users · No credit card required

env

API_URL=https://api.internal
DB_HOST=db.cluster.local
LOG_LEVEL=info

secrets

OPENAI_KEY ··············
GITHUB_TOKEN ··············
ioenv
Environment Cloud Core
Cloudflare Workers injected
Vercel injected
Kubernetes injected

Single source of truth for dev, staging, and prod. Fully encrypted. Fully auditable.

How it works

1

Sign in with GitHub

2

Create org & project

3

Add variables & secrets

4

Inject everywhere

Why ioenv

Configuration scattered across repos, chats, and memory does not scale. ioenv gives you one strict environment layer.

Prevent secret leaks

Three-layer encryption keeps secrets out of source code, Slack, and Notion. Store them in one place with strict access control and full audit trail.

One source of truth

Organize with an org → project → environment hierarchy. Keep dev, staging, and production in sync with versioning, diff, and instant rollback.

Works everywhere

Pull and push variables via CLI, generate scoped API tokens, or sync directly to Cloudflare Workers and Vercel projects.

Core capabilities

A minimal, strict environment layer for modern teams building serious systems.

Environment Manager

  • _base + dev/staging/prod with auto-creation
  • Cross-environment diff (color-coded)
  • Variable history with full audit trail
  • Import/export .env and JSON

Secrets Manager

  • Three-layer encryption (Platform → Org → Variable)
  • Per-record IV via Web Crypto API
  • Masked display, reveal on click
  • Scoped API tokens (SHA-256 hashed)

Integrations

  • Cloudflare Workers
  • Vercel Projects
  • Docker / Compose
  • GitHub Actions
  • Kubernetes
Project core-api
Key Value Last updated
API_URL https://api.internal 2 min ago
DB_HOST db.cluster.local 1 hour ago
LOG_LEVEL info yesterday
OPENAI_KEY •••••••••••• 3 days ago

Every change is versioned and auditable. Move fast without losing control.

Developer-first

Use ioenv from the CLI, the web console, or directly via API. Everything is scriptable.

  • CLI-first workflow
  • Simple, stable HTTP API
  • No framework lock-in
CLI
ioenv login
ioenv init
ioenv pull --env=staging
ioenv push
ioenv set OPENAI_KEY=sk-xxx
ioenv diff dev prod
ioenv inject -- npm start
API
GET /api/v1/env/{envId}/variables/export
Authorization: Bearer ioenv_xxxxxxxxxxxx

API_URL=https://api.internal
DB_HOST=db.cluster.local
OPENAI_KEY=sk-proj-xxxxxxxxxxxx

AI Key Proxy

Route all LLM traffic through ioenv. Keys never touch client code. Usage and cost become observable.

Your App ioenv Proxy OpenAI / Claude / Gemini
|
Analytics & Budget

OpenAI-compatible API

Single endpoint for GPT-4o, Claude, and more. Drop-in replacement using OpenAI SDK format.

Usage analytics

Per-model cost tracking with daily breakdown. See exactly where your AI budget goes.

Budget controls

Monthly spending caps and per-token rate limits. Prevent runaway costs before they happen.

Pricing

Start free. Scale with your team. No per-request surprises.

Free

For solo developers and small teams.

$0
  • Up to 5 users
  • 5 projects
  • 1,000 secrets
  • 7-day audit log
Get started
Recommended

Pro

For teams shipping production systems.

$8/user/mo
  • Unlimited projects & environments
  • Unlimited secrets
  • 90-day audit log
  • Cloud integrations (Cloudflare, Vercel)
  • Basic AI Key Proxy
Choose Pro

Team

For organizations that need full control.

$29/user/mo
  • 1-year audit log
  • Full integrations & webhooks
  • Advanced AI Key Proxy
  • SAML SSO (coming soon)
  • Priority support

How ioenv compares

ioenv Pro Doppler Team Infisical Team
Price $8/user/mo $21/user/mo $18/user/mo
AI Key Proxy

Security model

ioenv uses a three-layer key hierarchy to ensure secrets are never stored in plaintext.

  • Three-layer key hierarchy: Platform Key → Org Key → Variable
  • AES-256-GCM encryption with unique IV per record
  • Zero plaintext in database — values encrypted before write
  • Complete audit trail with actor, IP, and timestamp for every operation

Why teams trust ioenv

Built on Cloudflare

300+ edge nodes worldwide. P95 latency < 50ms.

AES-256-GCM

Three-layer key hierarchy. Zero plaintext storage.

Open Source CLI

MIT-licensed CLI and SDKs. Inspect the code on GitHub.

Transparent Pricing

No per-request fees. No hidden costs. Free tier forever.

Frequently asked questions

What is ioenv?

ioenv is an environment cloud that lets teams manage environment variables and secrets through a web dashboard, CLI, or API. All values are AES-256 encrypted and fully auditable.

How is encryption handled?

ioenv uses a three-layer key hierarchy: Platform Key → Org Key → Variable. Each value is encrypted with AES-256-GCM and a unique IV. Plaintext never touches the database.

Can I migrate from .env files?

Yes. Use the CLI command `ioenv push` or the web dashboard's import button to upload an existing .env file. Variables are encrypted and stored instantly.

What is the AI Key Proxy?

The AI Key Proxy routes LLM API calls through ioenv so API keys never appear in client code. It provides usage analytics, per-model cost tracking, and budget controls.

Is there a free tier?

Yes. The free plan supports up to 5 users, 5 projects, and 1,000 secrets with no credit card required. It's free forever.

What integrations are available?

Cloudflare Workers, Vercel Projects, Docker / Compose, GitHub Actions, and Kubernetes are all fully supported.