Envpilot - VS Code Extension
Securely sync environment variables from Envpilot to your local projects. This extension works with both VS Code and Cursor.
Features
- Secure Authentication: Sign in with your Envpilot account using OAuth
- Project Linking: Link your workspace to an Envpilot project
- Automatic Sync: Environment variables are synced to your local
.env file
- Permission-Aware: When permissions are revoked, synced files are automatically removed
- Multi-Environment: Sync variables for development, staging, or production
- Real-time Updates: Periodic checking for permission changes
Requirements
- VS Code 1.85.0 or higher (or Cursor)
- An Envpilot account with Pro tier (extension access is a Pro feature)
- A project in Envpilot with environment variables
Installation
- Install the extension from the VS Code marketplace
- Open the Command Palette (
Cmd/Ctrl + Shift + P)
- Run
Envpilot: Sign In
- Complete authentication in your browser
- Link a project with
Envpilot: Link Project
Usage
Sign In
- Open the Command Palette
- Run
Envpilot: Sign In
- A browser window will open for authentication
- After signing in, click "Check Sign In" in VS Code
Link a Project
- Ensure you're signed in
- Open the Command Palette
- Run
Envpilot: Link Project
- Select your organization and project
- Variables will be synced to your configured target file (default:
.env.local)
Pull Variables
Variables are synced automatically, but you can manually pull:
- Open the Command Palette
- Run
Envpilot: Pull Variables
Unlink a Project
- Open the Command Palette
- Run
Envpilot: Unlink Project
- This will remove the synced
.env file
Configuration
Open VS Code settings and search for "Envpilot" to configure:
| Setting |
Description |
Default |
envpilot.serverUrl |
Envpilot server URL |
Set at build time |
envpilot.autoSync |
Auto-sync on workspace open |
true |
envpilot.syncInterval |
Permission check interval (seconds) |
300 |
envpilot.targetFile |
Target file for synced variables |
.env.local |
envpilot.environment |
Default environment |
development |
envpilot.preventCopyOnRevoke |
Delete .env when permissions revoked |
true |
Security
- No plaintext secrets in storage: Authentication tokens are stored securely in VS Code's secret storage
- Permission revocation: When your access is revoked, the synced
.env file is automatically deleted
- Token expiration: Access tokens expire after 30 days and are automatically refreshed
- Audit logging: All extension activity is logged in Envpilot's audit log
Activity Bar
The extension adds an "Envpilot" view to your Activity Bar with:
- Projects: Browse and link projects
- Variables: View synced variables for the linked project
Status Bar
The status bar shows:
- Connection status (signed in/out)
- Linked project information
- Last sync time
- Click to see detailed status and quick actions
Commands
| Command |
Description |
Envpilot: Sign In |
Authenticate with Envpilot |
Envpilot: Sign Out |
Sign out and clear credentials |
Envpilot: Link Project |
Link current workspace to a project |
Envpilot: Unlink Project |
Unlink and remove synced variables |
Envpilot: Pull Variables |
Manually sync variables |
Envpilot: Refresh |
Refresh the project tree |
Envpilot: Open Dashboard |
Open Envpilot in browser |
Envpilot: Show Status |
Show status and quick actions |
Troubleshooting
"Extension access requires Pro tier"
Extension access is only available for Pro tier organizations. Upgrade your organization to Pro to use this feature.
"Token has been revoked"
Your access to the project has been revoked by an administrator. Contact your team lead or admin to restore access.
"Token has expired"
Your access token has expired. Sign out and sign in again to refresh your credentials.
Variables not syncing
- Check that you're signed in
- Verify a project is linked to your workspace
- Try manually pulling variables with
Envpilot: Pull Variables
- Check the output panel for error messages
Privacy
- The extension only accesses environment variables for linked projects
- Authentication tokens are stored locally in VS Code's secure storage
- No data is sent to third parties
- All communication is with your Envpilot server
Support
For issues and feature requests, visit the Envpilot GitHub repository.
License
MIT
| |
