About Varlock

Varlock is an open source command line tool and library for managing environment variables and secrets. It replaces .env.example with a .env.schema file that declares every variable your project needs, along with its type, whether it is required, whether it is sensitive, and where its value comes from. Varlock validates your configuration at startup, encrypts local overrides so nothing sensitive sits in plaintext, loads secrets from providers like 1Password, AWS, Vault, and Infisical through plugins, and redacts secret values from logs and console output at runtime.

Varlock is built for teams that work with AI coding agents. Agents can read your schema for full context on your configuration without ever seeing secret values, and the varlock proxy lets agents and MCP servers run with placeholder credentials that are swapped for real ones only at the network edge.

Who makes it

Varlock is developed and maintained by DMNO Inc., a small company focused on developer tooling for configuration and secrets. The project started in 2025 and is released under the MIT license. The current release is varlock 1.17.0.

Where to find it

Source code: github.com/dmno-dev/varlock
Package: npmjs.com/package/varlock
Documentation: Getting started
Updates: Blog
Support the project: Corporate sponsorship
Get in touch: Contact

Get Started View on GitHub