convex-env · diff
git:20260805.9009eae to git:20261103.5cf9acd
2 added, 1 removed. Audit B to B.
---
name: convex-env
description: "Set and wire Convex deployment env vars / secrets for the app."
---
<!-- GENERATED from convex-agents content/capabilities/env.json — do not edit by hand. -->
# Manage env vars + secrets
Store secrets as Convex deployment env vars (npx convex env set), read them with process.env in actions, never commit them.
## Workflow
1. `npx convex env set KEY value` (per deployment).
2. Read via process.env.KEY inside actions (not queries/mutations).
3. Never hardcode or commit secrets; add to .env.local only for local.
- 4. Confirm with `npx convex env list`.
+ 4. Confirm it's set with `npx convex env list --names-only`, which lists names without printing the secret values.
## Rules
- Secrets live in Convex env vars, never in code or git.
- process.env only in actions ('use node' if needed), not queries/mutations.
- Different deployments need their own values.
+ - Check what is set with `npx convex env list --names-only`; never print secret values into the conversation.