Zero-Knowledge secret management CLI
Project description
CriptEnv CLI
Zero-Knowledge secret management for developers and teams.
CriptEnv CLI is the command-line interface for the CriptEnv platform — an open-source alternative to Doppler and Infisical. Manage environment variables, API keys, and sensitive credentials with client-side AES-256-GCM encryption. Your secrets never reach our servers in plaintext.
Features
- Zero-Knowledge Encryption — Secrets are encrypted 100% client-side with AES-256-GCM before leaving your machine.
- Local Vault — SQLite-backed local cache for offline access to your secrets.
- Team Sync — Securely push and pull secrets across environments and team members.
- Audit Ready — Every operation is logged and traceable.
- CI/CD Friendly — Built-in support for CI tokens and GitHub Actions integration.
Installation
pip install criptenv
Requires Python 3.10+.
Quick Start
# Initialize the CLI
criptenv init
# Log in to your CriptEnv account
criptenv login
# Set a secret in the current environment
criptenv secrets set DATABASE_URL postgres://localhost/mydb
# List all secrets
criptenv secrets list
# Pull latest secrets from the server
criptenv sync pull
# Push local secrets to the server
criptenv sync push
Commands
| Command | Description |
|---|---|
init |
Initialize local vault and configuration |
login |
Authenticate with your CriptEnv account |
secrets set <key> <value> |
Encrypt and store a secret |
secrets get <key> |
Retrieve and decrypt a secret |
secrets list |
List all secrets in the current environment |
secrets delete <key> |
Remove a secret |
sync push |
Upload encrypted secrets to the server |
sync pull |
Download encrypted secrets from the server |
environments |
Manage project environments |
projects |
Manage projects |
doctor |
Check CLI health and connectivity |
Security
Secrets are encrypted using a key derived from your password via PBKDF2-HMAC-SHA256 (100,000 iterations) and HKDF-SHA256. The server only stores opaque encrypted blobs — it has no ability to decrypt your data.
Development
cd apps/cli
pip install -e ".[dev]"
python -m pytest tests -q
License
MIT License — see LICENSE for details.
Made with ❤️ by Jean Carlos Moreira Dias
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file criptenv-0.1.0.tar.gz.
File metadata
- Download URL: criptenv-0.1.0.tar.gz
- Upload date:
- Size: 36.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.14.3
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
1546a2fff10661deeabe50f633e3db80b8b35676a0051fde4ba1e0661ab3d0ae
|
|
| MD5 |
6902a15950480ef0d3e8dd244843a39c
|
|
| BLAKE2b-256 |
894b00abb526491154a6f6ddb4874cf0b77399f37bdaad865e908e566e9f775a
|
File details
Details for the file criptenv-0.1.0-py3-none-any.whl.
File metadata
- Download URL: criptenv-0.1.0-py3-none-any.whl
- Upload date:
- Size: 39.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.14.3
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
712897a4300bff12e431ca5fbf9213a0dd40ceba08929f7c0668364687d033b1
|
|
| MD5 |
fa5c4f914b488ed9b8748b3443d52d42
|
|
| BLAKE2b-256 |
41104ff9e44edff2a96ed3dfed5fcd58cb9136ae6555664f248b110a1f7b0961
|