Env Secrets Manager: Rotate Credentials Without Deploys

<!--tl&dr-->

**TL;DR:** Manage your environment secrets lifecycle — inject, rotate, and audit credentials — without requiring application-level changes or deploys.

<!--/tl&dr-->

The 10-Second Pitch

• **What it is:** A secrets lifecycle manager that handles injection, rotation, and audit for environment-bound credentials.
• **Who it's for:** DevOps engineers, security teams, platform engineers managing secrets sprawl.
• **Why it matters:** Credential rotation is the most neglected part of secrets management — and the highest-value.
• **Stack:** Node.js, integrates with HashiCorp Vault, AWS Secrets Manager, and dotenv files.

Setup Directions

Prerequisites

• Node.js >= 18
• A secrets backend (Vault, AWS SM, or local dotenv for dev)

Step 1 - Install

npm install @mrtech/env-secrets-manager --save-dev

Step 2 - Initialize

npx secrets-manager init --backend=vault --url=http://vault:8200 --token=$VAULT_TOKEN

Step 3 - Rotate

npx secrets-manager rotate --key=STRIPE_API_KEY --env=production

Pros / Cons

Verdict

Env Secrets Manager makes credential rotation a CLI operation instead of a multi-day project. The zero-deploy rotation capability eliminates the biggest resistance to rotation policies.

*Skill: env-secrets-manager | Ecosystem: claude-code | Runtime: node | Auth: api-key*