# dotsafe for your stack

> Use dotsafe with AI coding agents, your framework, and the platforms you deploy to.

## AI agents

- [Secret manager for Claude Code](https://dotsafe.dev/for/claude-code.md): Let Claude Code run your tests, migrations and dev servers with real API keys, without ever handing it a value.
- [Secret manager for Cursor](https://dotsafe.dev/for/cursor.md): Give Cursor's agent your project's API keys to run commands with, without putting a single value in its context.
- [Secret manager for Codex](https://dotsafe.dev/for/codex.md): Run Codex tasks that need real API keys, with the keys injected by dotsafe and kept out of what Codex reads.

## Frameworks

- [Manage Next.js environment variables without .env files](https://dotsafe.dev/for/nextjs.md): Keep your Next.js secrets encrypted with dotsafe and inject them into next dev and next build, instead of .env.local.
- [Manage Vite environment variables without .env files](https://dotsafe.dev/for/vite.md): Inject Vite's VITE_ variables and your server secrets from an encrypted dotsafe vault, instead of .env files.
- [Manage Node.js environment variables without dotenv](https://dotsafe.dev/for/nodejs.md): Replace dotenv and .env files in Node.js with an encrypted vault: dotsafe injects process.env when your app starts.
- [Manage Python environment variables without .env files](https://dotsafe.dev/for/python.md): Keep Django, Flask and FastAPI secrets in an encrypted dotsafe vault and inject them into os.environ, instead of python-dotenv.
- [Manage Rails secrets and ENV without .env files](https://dotsafe.dev/for/rails.md): Use dotsafe for the ENV side of a Rails app: API keys and database URLs encrypted on your Mac, injected into bin/rails.

## Platforms

- [Sync and rotate Vercel environment variables](https://dotsafe.dev/for/vercel.md): Keep the source of truth for your Vercel environment variables in dotsafe, and push each new value to Vercel when you rotate it.
- [Manage Cloudflare Workers secrets](https://dotsafe.dev/for/cloudflare-workers.md): Push secrets to your Cloudflare Workers from dotsafe, and rotate them in one step instead of running wrangler secret put by hand.