| name | env |
| description | Manage Convex env vars / secrets (set, wire into actions, never hardcode). TRIGGER on an API-key/secret/env-var request. |
| license | Apache-2.0 |
Manage env vars + secrets
Store secrets as Convex deployment env vars (npx convex env set), read them with process.env in actions, never commit them.
Steps
npx convex env set KEY value (per deployment).
- Read via process.env.KEY inside actions (not queries/mutations).
- Never hardcode or commit secrets; add to .env.local only for local.
- Confirm with
npx convex env list.
Rules
- Secrets live in Convex env vars, never in code or git.
- process.env only in actions ('use node' if needed), not queries/mutations.
- Different deployments need their own values.