Centralize environment variables, secrets, and runtime configs. Inject them into Cloudflare Workers, Vercel, Kubernetes, and more with full audit and versioning.
CLI-first. No lock-in. Designed for serious engineering teams.
env
secrets
Single source of truth for dev, staging, and prod. Fully encrypted. Fully auditable.
Configuration scattered across repos, chats, and memory does not scale. ioenv gives you one strict environment layer.
Remove secrets from source code, Slack, and Notion. Store them in one encrypted place with strict access control.
Keep dev, staging, and production in sync with versioning, diff, and instant rollback.
Push environment data into Cloudflare Workers, Vercel, Kubernetes, Docker, and CI pipelines.
A minimal, strict environment layer for modern teams building serious systems.
Every change is versioned and auditable. Move fast without losing control.
Use ioenv from the CLI, the web console, or directly via API. Everything is scriptable.
ioenv set OPENAI_KEY="sk-..." --env=prod ioenv get OPENAI_KEY --env=prod ioenv pull --env=staging ioenv diff staging prod
GET /v1/env?project=core-api&env=prod
Authorization: Bearer <token>
{
"API_URL": "https://api.internal",
"DB_HOST": "db.cluster.local",
"LOG_LEVEL": "info"
}
Route all LLM traffic through ioenv. Keys never touch client code. Usage and cost become observable.
Stop shipping LLM keys to browsers, apps, and untrusted environments.
See per-provider usage and cost in one place across OpenAI, Anthropic, and more.
Route traffic to different providers by model, latency, or cost.
Start free. Scale with your team. No per-request surprises.
For solo developers.
For teams shipping production systems.
For organizations that need full control.
ioenv never stores plaintext secrets. Everything is encrypted at rest and in transit.