Plaintext .env
One read from disk or git history puts every secret in play — for humans, malware, and anything with filesystem access.
Agent-safe secret brokering
Keep your secretsholstered.
Secure passage through the Wild West of AI development.
Env Holster pulls permanent credentials out of plaintext .env files and gives AI coding agents short-lived, scoped access instead. No raw keys in prompts. No long-lived secrets in chat history.
- No plaintext .env
- No permanent agent keys
- No secrets in transcripts
Env Holster access grantIssued
AgentCodex
ScopeStaging deploy
Expires in 04:59
eh_live_7K4••••••R9Master credential remains sealed
The exposure
Two ways credentials escape
Plaintext env files were leaky before agents. Now every tool call and transcript is another place a permanent key can land.
Plaintext
Agent gets a permanent key
Once a long-lived credential enters the model, it can show up in prompts, chat history, tool output, and MCP configs.
Exposure board
Blast radius open
.env.localpermanent secrets on diskAgent context exposed
Tool output exposed
Chat history exposed
What Env Holster does
Close both tracks
Holster permanent secrets. Replace leaky files. Broker temporary capability to agents — never the key itself on brokered paths.
For environments
Replace .env
Vault holds long-lived secrets. A plaintext config manifest describes what each environment needs — without putting raw keys on disk.
For agents
Broker at the boundary
Agents request scoped capability. Env Holster exchanges a short-lived grant at the boundary so the model never holds the permanent key.
Mechanisms
Why the blast radius shrinks
Brokered paths keep permanent credentials out of context windows, prompts, and transcripts.
Short-lived access replaces long-lived keys sitting in files or agent memory.
Provider, path, and TTL define what can be used — and for how long.
Pricing
Ridin’ solo is free.Shared lock boxes are for the posse.
One developer keeps the vault local and free. Crews that ship together unlock the same holster — no secrets left in plaintext or DMs.
Riding Solo
[Individual Developer]Ride alone. Holster stays on your machines.
- Local-first vault + agent broker for one developer
- Replace plaintext
.env, broker short-lived agent access - No shared unlock, no team seats
Free for local use. No shared unlock, no team seats.
Join beta as SoloPosee
[For the Team]$15/seat/mo
billed annually · $180/seat/yr · save ~21%
The lock box your crew unlocks together.
- Shared lock box unlock for every teammate
- Same holstered vault across the crew
- Agents & CI included — no machine seats
Private beta · Live now
Holster your secrets in the private beta.
Join the live beta to move long-lived credentials out of plaintext files and give your AI coding agents scoped, short-lived access instead.
Live now and hands-on by design. Get beta access, product notes, and direct support as you put Env Holster to work.