Software is changing, and dotenv must change with it. That is why I built
agentic secret storage (AS2). Agents run code without humans at terminals, so plaintext
.env files are the wrong primitive.
AS2 is built for autonomous software: encrypted by default, zero console access, and cryptography-first delivery that keeps operators out of the loop.
It is backed by Vestauth, the trusted auth layer for agents. Each agent has a cryptographic identity, requests are signed with private keys, and verified with public keys.
It is what I am using now. - motdotla
Quickstart
Install vestauth and initialize your agent.
npm i -g vestauth
vestauth agent initYour agent sets secrets with a simple curl endpoint:
vestauth agent curl -X POST https://as2.dotenvx.com/set -d '{"KEY":"value"}'And your agent gets secrets with a simple curl endpoint:
vestauth agent curl "https://as2.dotenvx.com/get?key=KEY"That is it. This primitive unlocks secret access for agents without human-in-the-loop, oauth flows, or API keys.