Env Manager

Manage environment variables, secrets, and config across agent sessions. Secure credential storage with encryption at rest.

Environment Manager

Securely manage environment variables, API keys, and configuration for your agent.

Features

• Encrypted secret storage (AES-256)
• Environment profiles (dev, staging, production)
• Auto-load on session start
• Credential rotation reminders
• Audit log of access

Usage

Store credentials

bash

# Set a secret (encrypted at rest)
echo "sk-abc123" > ~/.agent-env/secrets/OPENAI_KEY
chmod 600 ~/.agent-env/secrets/OPENAI_KEY

# Or use environment files
cat > ~/.agent-env/profiles/production.env << 'ENVEOF'
API_BASE=https://api.example.com
API_KEY=${secrets:API_KEY}
LOG_LEVEL=warn
ENVEOF

Load in sessions

Add to your AGENTS.md or heartbeat:

text

Before any API call, source ~/.agent-env/profiles/production.env

Credential rotation

Track when keys were last rotated:

bash

# Check age of all credentials
find ~/.agent-env/secrets -type f -printf "%T+ %p\n" | sort

Security Best Practices

• Never commit secrets to git
• Rotate API keys monthly
• Use separate profiles per environment
• Audit access logs weekly

Multi-Agent Secrets

For sharing credentials across a team of agents, consider ClawSwarm which provides secure agent-to-agent credential passing via encrypted channels.