Convex Env
ConvexOfficialPublished by Convex
- Skill
- Tool integration
- Cloud and DevOps
- Apache-2.0
- No issues found
AutoGineer summary
Written by AutoGineer from the skill’s own files, not by the author
This skill provides a standardized workflow for managing sensitive configuration data within Convex projects. It emphasizes security by ensuring secrets are stored as deployment-specific environment variables rather than being hardcoded or committed to version control. The skill outlines the necessary commands for setting and listing variables and provides architectural guidance on where these variables can be accessed within the Convex runtime.
What it does
- Sets environment variables and secrets for specific Convex deployments.
- Provides commands to list existing environment variable names without exposing sensitive values.
- Defines the architectural pattern for accessing secrets exclusively within Convex actions.
- Enforces security best practices by prohibiting the hardcoding of secrets in source code.
When to use it
- When you need to securely inject API keys or credentials into your Convex backend.
- When managing configuration differences between development, staging, and production environments.
- When you need to verify which environment variables are currently configured for a deployment.
Advantages
- Prevents accidental exposure of sensitive credentials in version control systems.
- Ensures consistent secret management across different deployment stages.
- Provides a clear, secure workflow for accessing configuration data in server-side actions.
Usage examples
- “Set the STRIPE_API_KEY for my current Convex deployment.”
- The agent executes the command to securely store the provided key as an environment variable in the active Convex deployment.
- “List all configured environment variable names.”
- The agent returns a list of variable names currently set in the deployment without revealing the actual secret values.
Install
Download the skill as a ZIP:
https://mp-staging.autogineer.com/agent-skills/convex/convex-env/downloadUnzip it into the cross-client skills folder of your project:
mkdir -p .agents/skills && unzip convex-env.zip -d .agents/skills
Documentation by Convex
<!-- GENERATED from convex-agents content/capabilities/env.json — do not edit by hand. -->
Manage env vars + secrets
Store secrets as Convex deployment env vars (npx convex env set), read them with process.env in actions, never commit them.
Workflow
npx convex env set KEY value(per deployment).Read via process.env.KEY inside actions (not queries/mutations).
Never hardcode or commit secrets; add to .env.local only for local.
Confirm it's set with
npx convex env list --names-only, which lists names without printing the secret values.
Rules
Secrets live in Convex env vars, never in code or git.
process.env only in actions ('use node' if needed), not queries/mutations.
Different deployments need their own values.
Check what is set with
npx convex env list --names-only; never print secret values into the conversation.
Files
- ATTRIBUTION.mdAdded by AutoGineer844 B
- LICENSELicence file added by AutoGineer10.7 KiB
- SKILL.md973 B
SKILL.md
<!-- GENERATED from convex-agents content/capabilities/env.json — do not edit by hand. -->
Manage env vars + secrets
Store secrets as Convex deployment env vars (npx convex env set), read them with process.env in actions, never commit them.
Workflow
npx convex env set KEY value(per deployment).Read via process.env.KEY inside actions (not queries/mutations).
Never hardcode or commit secrets; add to .env.local only for local.
Confirm it's set with
npx convex env list --names-only, which lists names without printing the secret values.
Rules
Secrets live in Convex env vars, never in code or git.
process.env only in actions ('use node' if needed), not queries/mutations.
Different deployments need their own values.
Check what is set with
npx convex env list --names-only; never print secret values into the conversation.
Requirements and compatibility
Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta
“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.
Needs: Needs Node.js
Security
No issues found by our static scan· No issues found
A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.
Attribution and licence
- Published by
- Convex
- Publisher
- Convex (Official)
- Source
- convex/agent-skills · skills/convex-env · commit f60629d
- Licence
- Apache License 2.0 (redistribution allowed)
- LICENSE (added by AutoGineer from LICENSE)
- ATTRIBUTION.md (written by AutoGineer)
- Synced
AutoGineer is not affiliated with or endorsed by Convex.
Download ZIP
The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download convex-env.zip