Compare
Envlet and Doppler
Doppler is a mature secrets manager with a large integration catalog and enterprise controls. Envlet is the smaller tool for teams whose secrets are env vars and whose readers include coding agents.
What Doppler does well
Doppler syncs secrets into many third-party systems, offers enterprise features like SSO and SCIM, and prices paid plans per user. If you need secrets pushed into a dozen SaaS tools or a compliance program today, look there first.
Where Envlet differs
- 01Who counts as a seat
- Envlet bills humans only. Five coding agents are five tokens and zero seats, on every plan including Free.
- 02Agents get their own tokens
- Every coding agent gets its own token. Production starts withheld for it, and the audit log shows what it read, under its own name.
- 03Setup is one command, or one sentence
- envlet run -- in front of the command you already use, or the MCP server and the words move us to Envlet. Nothing to install on the host, nothing to operate.
- 04Scope
- Envlet does one thing: the environment a process starts with. No sync to other secret stores, no PKI, no Kubernetes operator. One token per environment, values pulled at boot.
When to pick which
Pick Envlet when
You want your team, your agents, and CI on one command, you count humans not machines, and you would rather not learn a platform.
Pick Doppler when
You need secrets synced into many external systems or enterprise identity controls now.