CryptEnv — Development skill for Claude Code
A local-first encrypted secrets vault for developers.
How to install CryptEnv
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open maosuarez/CryptEnv and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What CryptEnv does
A local-first encrypted secrets vault for developers. API keys, credentials, commands and links — accessible with a hotkey.
Alternatives in Development
- Sanitize — Detect and redact PII from text files — 15 categories (SSNs, credit cards, API keys, etc.), zero dependencies 3.1k ★
- Dexscreener Unofficial CLI + MCP + Skills — You are a token scanning specialist using the Dexscreener Unofficial CLI (not affiliated with or endorsed by D 213 ★
- Agentrules Architect — AGENTS.md/CLAUDE.md generator and ExecPlan harness for Codex, Claude Code, Cursor, Antigravity, OpenCode and o 114 ★
README
🔐 CryptEnv
**A local-first, encrypted productivity vault for developers — accessible instantly via hotkey (`Ctrl+Alt+Z`). Safely integrate with AI coding agents (Claude, Cursor) via MCP to inject secrets without exposing plaintext credentials.**
    
🎯 Why CryptEnv?
Modern development requires managing dozens of API keys, database credentials, and environment variables across multiple stacks. Sharing secrets over chat or storing them in plaintext `.env` files is a major security risk. Furthermore, when automating workflows with AI coding assistants (Claude Code, Cursor, MCP clients), sharing API keys in prompts exposes them to logs and external context windows.
**CryptEnv solves this by providing:**
- Zero Plaintext Leaks: All secrets are encrypted at rest with AES-256-GCM and Argon2id. Master keys live only in volatile memory during active sessions.
- AI Agent Integration via MCP: The built-in Model Context Protocol (MCP) server injects environment variables directly into subprocesses without returning plaintext secrets to the LLM.
- Projects & Environments: Group variables by project (
dev,staging,prod) and inject them directly into your local.envfiles with a single click or command. - Multiple Interfaces: Use the sleek desktop GUI, the full-featured
crypt-env tuiterminal interface, the CLI, or the local REST API.
✨ Key Features
- ⚡ Instant Access: Press
Ctrl+Alt+Zfrom anywhere to summon the vault. - 🗂️ 5 Item Types: Secrets / API Keys, Credentials (user/pass/URL), Links, Parameterized Commands (
{{VAR}}), and
Related Skills
Heeler Secrets Scan
Run Heeler secret scanning for a repository or staged changes. Use when comitting code or the user asks to det
Bashrc Credential Guard
Always check ~/.bashrc for credentials, API keys, passwords, and configuration values before asking user
Claude Code Privacy Guard
🛡️ Claude Code plugin that blocks prompts containing secrets, API keys, and PII before they reach Claude.
Vault Janitor
Propose safe, dry-run-first cleanup actions. Use when orphaned notes, duplicate content, or broken links shoul
Jobs Cover
Write a tailored cover letter for a specific role, researched and in the candidate's voice. Saves to the vault
Jobs Prep
Build a complete interview prep guide for a specific company, role, and stage, grounded in the story library.
Related Agents
Secret Purist
The paranoid sentinel of credential security. Use this agent to scan codebases and git history for leaked secr
Secret Guard
MUST be used whenever the user asks to scan for secrets, API keys, credentials, or tokens before a commit or i
Credentials Manager
Gestiona credenciales del proyecto (.env, API keys, tokens, webhooks). Úsalo CADA VEZ que aparezcan credencial