▶ TAURI · RUST · LOCAL-ONLY

Stop Context
Switching.
Local-First Environment Variable Manager.

Q: Is envyou free?

Yes. envyou has a free tier that includes up to 3 projects, 10 variables per project, the global hotkey, always-on-top, and local AES-256-GCM encryption. Pro unlocks unlimited projects and variables, custom themes, and the Claude Desktop MCP integration — a one-time $59 for a Lifetime license (no subscription).

Q: Does envyou send my secrets to the cloud?

No — envyou is local-first and never syncs your secrets anywhere. All of your projects, variables, and settings are stored in a single AES-256-GCM encrypted file on your own machine: no cloud sync, no account, no envyou server that receives your secrets. The one time a value leaves your machine is when you approve Claude reading it — then that specific value is sent to your AI provider (e.g. Anthropic) to answer your request, and never before.

Q: How does the Claude Desktop MCP integration work?

envyou can run as a Model Context Protocol (MCP) server for both Claude Desktop (link it from Settings) and Claude Code (claude mcp add). Claude launches 'envyou --mcp', which speaks JSON-RPC 2.0 MCP over STDIO and exposes list_projects, list_variable_names, read_env_variables (you name the exact variables to read), and write_env_variable. Reading or writing a value triggers a native approval dialog on your machine — the value is only released after you approve, writing is off until you opt in, and if the dialog can't be shown or times out the request is denied. Values you approve are sent to your AI provider (e.g. Anthropic) to answer your request.

Q: How is envyou different from dotenv, 1Password, Doppler, or Infisical?

dotenv is a library and a plaintext .env file format, not an encrypted manager with a UI. 1Password, Doppler, and Infisical are excellent cloud-based or team-oriented secrets platforms that typically sync secrets to a server and run on a subscription. envyou is a single-developer, local-first desktop app: secrets stay encrypted on your machine, there is no cloud sync, pricing is a one-time $59 lifetime (no subscription), and it integrates directly with Claude Desktop over MCP.

Q: What encryption does envyou use?

envyou stores all state in a single file encrypted with AES-256-GCM. In the current build the encryption key is derived from your machine id, which binds the encrypted state to your device. This is an MVP key-derivation scheme; the storage format is designed so a future build can swap in a user master password with a stronger key-derivation function without changing the file format.

Q: Which platforms does envyou support?

envyou is built on Tauri (Rust) and targets Windows, macOS, and Linux desktops. Because it uses Tauri instead of Electron, the app is only a few megabytes and uses very little memory.

Q: Does envyou require a subscription?

The free tier is free forever. Pro is a one-time $59 Lifetime license with no recurring charges — there is no subscription.

envyou is a local-first, encrypted environment variable manager for developers that stores your .env secrets and API keys only on your machine (AES-256-GCM), never in the cloud — and connects to Claude Desktop over MCP so AI can read and write environment variables only after you approve each request.

Stop jumping between your editor and terminal. Keep your .env always on top and copy it with one click.

No more heavy cloud config tools. envyou is a lightweight desktop app of just a few MB that stores every key locally, AES-256 encrypted. And it connects to Claude Desktop over MCP so AI can read and write your environment variables directly.

⬇ Download Free See Pro — $59 lifetime

Zero Cloud AES-256-GCM Claude MCP Native No Subscription

■ envyou 📌≡_

FREEUpgrade to Pro »

PROJECTS+

api-server 4
web-app 7
staging 2

VARS — api-server👁 +

DATABASE_URL••••••••

AWS_SECRET_KEY••••••••

PORT8080

NODE_ENVproduction

Always on Top ✔◢

Why envyou

For developers tired of heavy, scattered workflows — we focused on the three things that matter.

🪶

Ultra lightweight

Built on Tauri (Rust), not Electron. A floating desktop app that uses only a few MB of memory and pops up instantly with a global hotkey.

⌨ Ctrl + Shift + E

🔒

Local, encrypted storage

Your API keys and DB passwords live only on your machine — one AES-256-GCM encrypted file, no cloud sync. When you approve Claude reading a value, only that value is shared with your AI provider.

🚫 No Cloud Sync

🤖

Claude MCP integration

Connect to Claude Desktop over the Model Context Protocol. AI can read and write your variables directly — but every call pops a physical approval dialog you must accept.

$ envyou --mcp

This is why you need envyou

The daily .env grind — pasting, comparing environments, searching, wiring up AI — and how the app makes it vanish, shown on real screens.

■ Smart Import

export DATABASE_URL="postgres://…"
NEXT_PUBLIC_URL=https://app.io
const k = process.env.OPENAI_API_KEY

NEWDATABASE_URLsecret••••

NEWNEXT_PUBLIC_URLhttps://app.io

UPDATEOPENAI_API_KEYsecret(empty)

Smart Import — paste .env, export, JSON, or process.env, anything. Preview new keys, conflicts, and secrets before you save.

■ Diff — staging ⇄ production

−STRIPE_SECRETstaging only

+SENTRY_DSNproduction only

≠DATABASE_URLvalues differ ••••

=NODE_ENVsame

Compare environments — spot missing keys and changed values between staging and production at a glance. Values masked by default; copy to the other side in one click.

■ Command Palette

⌕ database▮

＄ DATABASE_URL (api-server)

＄ DATABASE_URL (staging)

⧉ Export .env

⇄ Compare projects

↑↓ move · Enter copy · Esc close

Command Palette — one Ctrl+K reaches projects, variables, and actions with the keyboard alone. No mouse required.

■ Claude Desktop + envyou (MCP)

🤖 “What's the DATABASE_URL for api-server?”

⚠ envyou approval request

Claude wants to read DATABASE_URL.

DenyAllow

A human must approve before AI sees a secret. Every read and write pops a local approval dialog — nothing is shared until you click Allow, and approved values go to your AI provider.

■ Free → Pro unlock

FREE

Projects3 / 3 🔒

Variables10 / 10 🔒

Custom colors🔒 Pro

Claude MCP🔒 Pro

PRO ✦

ProjectsUnlimited ✔

VariablesUnlimited ✔

Custom colors✔

Claude MCP✔

One payment, $59 — yours for life. Use it free, and when you hit a limit the app brings you right here. Lifetime updates, no subscription.

envyou vs dotenv, 1Password, Doppler & Infisical

Different tools for different jobs. Cloud secrets platforms are great for teams; envyou is built for a single developer who wants secrets to stay encrypted on their own machine, with a one-time price and native Claude Desktop MCP support.

Capability	envyou	dotenv	1Password	Doppler	Infisical
What it is	Local desktop env manager	Library + .env file format	Password / secrets manager	Cloud secrets platform	Open-source secrets platform
Where secrets live	Only on your machine	Plaintext .env file	Vendor cloud (E2E encrypted)	Vendor cloud	Cloud or self-hosted
Encrypted at rest	Yes — AES-256-GCM	No (plaintext)	Yes	Yes	Yes
Cloud sync required	No	No	Yes	Yes	Yes (or self-host)
Team collaboration	Single developer focus	Via your own repo/tooling	Yes	Yes	Yes
Claude Desktop MCP	Native	No	No	No	No
Pricing model	Free + $59 one-time (lifetime)	Free / open source	Subscription	Free tier + subscription	Open source + paid tiers

Comparison reflects the typical, publicly documented positioning of each tool as a category, not a feature-by-feature benchmark; capabilities and pricing of third-party products change over time. dotenv, 1Password, Doppler, and Infisical are trademarks of their respective owners.

Pricing — no subscription

Buy once, keep it forever. A single payment permanently unlocks every Pro feature.

■ Free.exe✕

Free

Enough to get started.

✔ Up to 3 projects
✔ 10 variables per project
✔ Global hotkey · Always on Top
✔ Local AES-256 encryption
✔ One-click .env copy & paste
✕ Custom themes · per-env colors
✕ Claude MCP integration

⬇ Download free

ONE-TIME

★ Pro.exe✕

Pro

$59 / one-time, lifetime

No subscription. No extra fees.

✔ Create unlimited projects
✔ Register unlimited variables
✔ Custom themes · per-env colors
✔ Unlock Claude MCP permissions
✔ Master-key secure storage (Argon2id)
✔ Offline license activation
✔ All future updates free
✔ Priority email support

★ Lifetime — $59

Download

Same app, two ways. Grab it free and start now, then unlock Pro inside the app whenever you want — one payment, yours for life.

■ Start free$0

⊞ Windows (.msi) 🐧 Linux (AppImage) ⌘ macOS (coming soon)

Clicking a button downloads the installer directly. Windows isn't code-signed yet, so SmartScreen may warn — More info → Run anyway. macOS is coming soon.

★ Unlock with Pro$59 · lifetime

Unlimited projects & variables, Claude MCP integration, custom colors, lifetime updates. After payment a license key is emailed to you; paste it into “Upgrade to Pro” in the same app and it unlocks instantly (offline activation).

★ Lifetime — $59

Frequently Asked Questions

Common questions from developers about how envyou stores secrets, what it costs, and how the Claude Desktop MCP integration works.

Is envyou free?

Yes. envyou has a free tier that includes up to 3 projects, 10 variables per project, the global hotkey, always-on-top, and local AES-256-GCM encryption. Pro unlocks unlimited projects and variables, custom themes, and the Claude Desktop MCP integration — a one-time $59 for a Lifetime license (no subscription).

Does envyou send my secrets to the cloud?

No — envyou is local-first and never syncs your secrets anywhere. All of your projects, variables, and settings live in a single AES-256-GCM encrypted file on your own machine: no cloud sync, no account, no envyou server that receives your secrets. The one time a value leaves your machine is when you approve Claude reading it — then that specific value is sent to your AI provider (e.g. Anthropic) to answer your request, and never before.

How does the Claude Desktop MCP integration work?

envyou can run as a Model Context Protocol (MCP) server. It works with Claude Desktop (link it from Settings) and Claude Code (claude mcp add). Claude launches envyou --mcp, which speaks JSON-RPC 2.0 MCP over STDIO and exposes list_projects, list_variable_names, read_env_variables (you name the exact variables), and write_env_variable. Reading a value or writing one triggers a native approval dialog on your machine — the value is only released after you approve, and writing is off until you opt in. If the dialog can't be shown or you don't answer in time, the request is denied.

How is envyou different from dotenv, 1Password, Doppler, or Infisical?

dotenv is a library and a plaintext .env file format, not an encrypted manager with a UI. 1Password, Doppler, and Infisical are excellent cloud-based or team-oriented secrets platforms that typically sync secrets to a server and run on a subscription. envyou is a single-developer, local-first desktop app: secrets stay encrypted on your machine, there is no cloud sync, pricing is a one-time $59 lifetime (no subscription), and it integrates directly with Claude Desktop over MCP. See the comparison table for details.

What encryption does envyou use?

envyou stores all state in a single file encrypted with AES-256-GCM. In the current build the encryption key is derived from your machine id, which binds the encrypted state to your device. This is an MVP key-derivation scheme — not a claim of unbreakable or "bank-grade" security — and the storage format is designed so a future build can add a user master password with a stronger key-derivation function without changing the file format.

Which platforms does envyou support?

envyou is built on Tauri (Rust) and targets Windows, macOS, and Linux desktops. Because it uses Tauri instead of Electron, the app is only a few megabytes and uses very little memory.

Does envyou require a subscription?

The free tier is free forever. Pro is a one-time $59 Lifetime license with no recurring charges — there is no subscription.

Stop ContextSwitching.Local-First Environment Variable Manager.