Vibe coding? Your secrets are already leaking.

One command

Detects Claude Code, Cursor, Windsurf, and Codex in the current project directory. Writes a skill file that teaches the AI never to touch .env files, and an MCP config that connects the AI directly to EnvNest — so it can read and write secrets without ever seeing raw values in the chat.

• ✓Non-destructive — appends to existing files, never overwrites
• ✓Idempotent — safe to run more than once
• ✓Project-scoped — writes to the current directory, not your home folder

What gets created

Each detected tool gets two files: a skill file with EnvNest rules, and an MCP config pointing at the EnvNest endpoint.

{
  "mcpServers": {
    "envnest": {
      "url": "https://app.envnest.dev/mcp",
      "headers": {
        "Authorization": "Bearer <your-token>"
      }
    }
  }
}

{
  "envnest": {
    "url": "https://app.envnest.dev/mcp",
    "headers": {
      "Authorization": "Bearer <your-token>"
    }
  }
}

{
  "envnest": {
    "url": "https://app.envnest.dev/mcp",
    "headers": {
      "Authorization": "Bearer <your-token>"
    }
  }
}

{
  "envnest": {
    "url": "https://app.envnest.dev/mcp",
    "headers": {
      "Authorization": "Bearer <your-token>"
    }
  }
}