@fentz26/envcp 1.0.81 → 1.0.83-a
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +23 -9
- package/package.json +10 -1
package/README.md
CHANGED
|
@@ -9,8 +9,9 @@
|
|
|
9
9
|
|
|
10
10
|
##
|
|
11
11
|
<p align="center">
|
|
12
|
-
|
|
13
|
-
|
|
12
|
+
<a href="https://www.npmjs.com/package/@fentz26/envcp"><img src="https://img.shields.io/npm/v/%40fentz26%2Fenvcp?style=flat-square&color=000000&labelColor=000000&label=version" alt="npm version"></a>
|
|
13
|
+
<a href="https://www.npmjs.com/package/@fentz26/envcp"><img src="https://img.shields.io/npm/dt/%40fentz26%2Fenvcp?style=flat-square&color=000000&labelColor=000000&label=downloads" alt="npm downloads"></a>
|
|
14
|
+
<a href="https://www.npmjs.com/package/@fentz26/envcp"><img src="https://img.shields.io/npm/unpacked-size/%40fentz26%2Fenvcp?style=flat-square&color=000000&labelColor=000000&label=size" alt="npm size"></a>
|
|
14
15
|
<a href="https://github.com/fentz26/EnvCP/actions"><img src="https://img.shields.io/github/actions/workflow/status/fentz26/EnvCP/ci.yml?style=flat-square&color=000000&labelColor=000000&label=ci" alt="CI"></a>
|
|
15
16
|
<a href="https://github.com/fentz26/EnvCP/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-SAL%20v1.0-000000?style=flat-square&labelColor=000000" alt="license"></a>
|
|
16
17
|
<a href="https://nodejs.org"><img src="https://img.shields.io/node/v/%40fentz26%2Fenvcp?style=flat-square&color=000000&labelColor=000000&label=node" alt="node version"></a>
|
|
@@ -33,6 +34,14 @@
|
|
|
33
34
|
npm install -g @fentz26/envcp
|
|
34
35
|
```
|
|
35
36
|
|
|
37
|
+
### pip (Python)
|
|
38
|
+
|
|
39
|
+
```bash
|
|
40
|
+
pip install envcp
|
|
41
|
+
```
|
|
42
|
+
|
|
43
|
+
> Requires Node.js 18+ to be installed.
|
|
44
|
+
|
|
36
45
|
### curl
|
|
37
46
|
|
|
38
47
|
```bash
|
|
@@ -81,7 +90,7 @@ envcp export [--format env|json|yaml]
|
|
|
81
90
|
## Why EnvCP?
|
|
82
91
|
|
|
83
92
|
- **Local-only storage** — Your secrets never leave your machine
|
|
84
|
-
- **Encrypted at rest** — AES-256-GCM with
|
|
93
|
+
- **Encrypted at rest** — AES-256-GCM with Argon2id key derivation (64 MB memory, 3 passes)
|
|
85
94
|
- **Reference-based access** — AI references variables by name, never sees the actual values
|
|
86
95
|
- **Automatic .env injection** — Values can be automatically injected into your .env files
|
|
87
96
|
- **AI Access Control** — Block AI from proactively listing or checking your secrets
|
|
@@ -318,11 +327,16 @@ access:
|
|
|
318
327
|
|
|
319
328
|
### Encryption Details
|
|
320
329
|
|
|
321
|
-
- **Cipher**: AES-256-GCM
|
|
322
|
-
- **Key Derivation**:
|
|
323
|
-
- **Salt**:
|
|
324
|
-
- **IV**: 16 bytes per encryption
|
|
325
|
-
- **Auth Tag**: 16 bytes for integrity
|
|
330
|
+
- **Cipher**: AES-256-GCM (authenticated encryption)
|
|
331
|
+
- **Key Derivation**: Argon2id (64 MB memory, 3 passes, parallelism 1)
|
|
332
|
+
- **Salt**: 16 bytes per encryption (random)
|
|
333
|
+
- **IV**: 16 bytes per encryption (random)
|
|
334
|
+
- **Auth Tag**: 16 bytes for integrity verification
|
|
335
|
+
- **Legacy**: existing v1 stores (PBKDF2) are automatically read and re-encrypted on next write
|
|
336
|
+
|
|
337
|
+
### MCP (stdio) Authentication
|
|
338
|
+
|
|
339
|
+
The MCP server runs over stdio — it is only accessible to processes on your local machine that spawn it. No network port is opened in MCP mode; security is enforced by OS process isolation.
|
|
326
340
|
|
|
327
341
|
### API Authentication
|
|
328
342
|
|
|
@@ -351,7 +365,7 @@ Authorization: Bearer your-secret-key
|
|
|
351
365
|
|
|
352
366
|
## License
|
|
353
367
|
|
|
354
|
-
|
|
368
|
+
SAL v1.0 — See LICENSE file for details.
|
|
355
369
|
|
|
356
370
|
## Support
|
|
357
371
|
- Email: contact@fentz.dev
|
package/package.json
CHANGED
|
@@ -1,7 +1,16 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@fentz26/envcp",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.83a",
|
|
4
|
+
"mcpName": "dev.fentz.envcp/envcp",
|
|
4
5
|
"description": "MCP server for secure environment variable management - Keep your secrets safe from AI agents",
|
|
6
|
+
"homepage": "https://envcp.fentz.dev",
|
|
7
|
+
"repository": {
|
|
8
|
+
"type": "git",
|
|
9
|
+
"url": "https://github.com/fentz26/EnvCP.git"
|
|
10
|
+
},
|
|
11
|
+
"bugs": {
|
|
12
|
+
"url": "https://github.com/fentz26/EnvCP/issues"
|
|
13
|
+
},
|
|
5
14
|
"type": "module",
|
|
6
15
|
"main": "dist/index.js",
|
|
7
16
|
"types": "dist/index.d.ts",
|