Envless CLI

The Envless CLI lets you authenticate once, then manage everything you can manage in the dashboard: products, projects, environments, variables, versions, your team and its roles. Variables are encrypted on your machine before they are sent and decrypted locally when you read them, so your workspace passphrase never leaves the machine.

Install

npm i -g @goenvless/cli@latest

Sign in

envless login

Link the directory

envless link             # pick a workspace, project, and one or more environments

This writes a .envless file at the repo root pinning the directory to the chosen workspace + project + environments. Commit it.

Set the workspace passphrase (once per machine)

envless passphrase set

The passphrase derives the encryption key the CLI uses to decrypt variables. It's cached in ~/.envless/config.json (mode 0600) so subsequent syncs run silently. Use envless passphrase clear to wipe it.

Sync

envless sync             # pulls every environment in .envless, writes .env.<slug>

Re-run any time. Sync is idempotent and will not touch files when nothing changed.

Start from scratch

envless init             # creates a project with its environments, then links the directory

Variables

envless var set STRIPE_KEY=sk_live_123    # create or update, add --env a,b for several
envless var list                          # masked table, add --reveal to show values
envless var get STRIPE_KEY                # prints one value and nothing else
envless var rm STRIPE_KEY
envless push                              # upload a local .env, add --prune to delete extras

var get prints the bare value, so KEY=$(envless var get STRIPE_KEY) works.

Versions

envless publish "before the migration"    # snapshot the environment, notify the team
envless version list
envless version get v12 --reveal          # what a snapshot held
envless version restore v12

Manage

envless product create|list|update|duplicate|delete
envless project create|list|update|duplicate|delete
envless env create|list|rename|duplicate|expose|delete
envless workspace list|create|update|use|delete
envless member invite|list|update|remove|resend
envless role list|create|update|delete|permissions
envless access grant|revoke|list          # who can reach a private product
envless domain claim|status|verify|remove

Every list takes --json. Every delete takes --yes. delete and duplicate accept several targets at once.

Running your app

envless run -- node server.js             # inject variables, nothing written to disk
envless types                             # generate a typed envless-env.d.ts

Other commands

envless whoami           # show the signed-in account
envless logout           # sign out and clear local credentials
envless link             # re-run any time to switch workspace, project, or env list
envless --help           # every command, with examples

Commands that create, change or delete anything need a device login. An ev_sk_ API key can read but not write.

Full documentation at docs.envless.cloud.