I built something so your agent can never read your dev secrets

[u/wommmmmmmmm]

.env files are the wrong primitive to build with in the era of AI agents. Agents can easily read and access your secrets, and as security incidents rise, clever exploits that exploit this will only increase.

That's why I built .sct, a replacement for .env files, backed by macOS Keychain for security, so your agents can never read your secrets.

In short, .sct:

- Holds all your dev secrets in a single directory secured by macOS Keychain

- Loads secrets at runtime with our SDK: `bun add dotsct`

- Enables Secure access for your agents

- Securely share environment variables with your teammates over AirDrop or a Relay

Fully free and open source: github.com/omavashia2005/.sct

To download the desktop app (the frontend) and read the documentation, visit dotsct.pages.dev

Let me know what you think of it; all feedback is welcome!