v0.1.0
First public release of rotate — rotate a leaked or expired API-key env variable across all your .env and .mcp.json files, safely.
Install
curl -fsSL https://raw.githubusercontent.com/yangsi7/rotate-env/v0.1.0/install.sh | bashHighlights
- Rotates a named env var's value across
.env,.env.*,.envrc, and.mcp.json, discovered at runtime withfd. .envviaawk(preserves quoting /export/ inline comments, exact-key, literal value);.mcp.jsonviajq walk(env, headers,args[]wrapper).- Secret never on argv (passed via environment), never printed (masked). New value via
--value-file,$ROTATE_NEW_VALUE, a silent prompt, or stdin. - Dry-run by default; atomic
temp+mvwrites, preserved perms, optional--backup(chmod 600); idempotent;--old-value-filesurgical rotation.
See the CHANGELOG.