EnvForge

A Rust CLI + TUI for environment variables, with extra tools so AI coding agents are less likely to eat your secrets.

Fence secret files, harden MCP configs, MCP supply-chain pin/verify, and run commands with secrets in memory. Linux and macOS. Source-available (Elastic License 2.0). 28 AI safety tools. 2,800+ tests.

Website · CLI reference · Integration matrix · Security

License: Elastic License 2.0 (source-available, not OSI open source). You may use and modify EnvForge. You may not offer it to others as a hosted service. Crates 0.1.0–0.8.0 were MIT; 0.8.1+ is ELv2.

GitGuardian's 2026 report found AI-assisted commits leak secrets at about 2x the baseline rate, and more than 24,000 credentials sitting in MCP config files on public GitHub.

EnvForge is not a sandbox. Ignore files do not block the terminal or MCP. See the integration matrix for covered vs fallback per tool.

Install

brew install emreerinc/tap/envforge

Or:

cargo install env-forge-tui

Needs Rust 1.75+ if you build from source. Binary name is envforge. Crate name is env-forge-tui.

Linux and macOS tarballs: Releases.

Protect a project

envforge fence
envforge fence --status
envforge mcp status
envforge mcp harden
envforge ai-hook install cursor

To inject env into a process without writing secrets to disk, see envforge run in the CLI reference.

Everyday use

envforge
envforge list
envforge set KEY=value
envforge doctor

Full command list: CLI reference.

Editors

Language Server: envforge lsp.

• VS Code
• IntelliJ
• Neovim: editors/
• Zed: LSP only (no gutter / status bar yet)

For full CLI features, install with the Homebrew tap above. Do not use brew install envforge.

Limits

• Fence writes ignore files and rules. It is not a sandbox.
• envforge mcp serve is optional (Cargo feature mcp-server). Default brew and GitHub binaries do not include it.
• Windows is not supported.
• Secret providers call vendor CLIs (vault, op, aws). They are not native SDKs.

Docs

Doc	What
CLI reference	Commands
Integration matrix	Covered vs fallback per AI tool
MCP server	Optional metadata-only MCP
LSP clients	Editor setup
SECURITY.md	Threat model
CHANGELOG.md	Releases

License

Elastic License 2.0. Source-available, not OSI open source. See CONTRIBUTING.md to send a patch.