env

Manage environment variables for your apps. Values are encrypted at rest.

set

Set an environment variable. Keys are auto-uppercased.

floo env set LOG_LEVEL=info --app my-app

Flags

Flag	Description
`--app APP`	App name or UUID (reads from config if omitted)
`--service SVC`	Target specific services (repeatable or comma-separated)
`--env ENV`	Environment: `dev` (default) or `prod`
`--restart`	Restart the app after setting (triggers a full redeploy with fresh env vars)
`--stdin`	Read the value from stdin so it stays out of argv, shell history, and process listings
`--value-file PATH`	Read the value from a file
`--secret`	Mark the value write-only; floo never returns it
`--preflight`	Preview the change without applying it

Examples

floo env set DATABASE_URL --stdin --secret --app my-app
floo env set STRIPE_SECRET_KEY --value-file ./stripe-key.txt --secret --app my-app
floo env set NODE_ENV=production --app my-app --restart
floo env set API_KEY --stdin --secret --app my-app --service api --service worker

JSON output

{
  "success": true,
  "data": {
    "key": "DATABASE_URL",
    "masked_value": "postgres://us...***"
  }
}

get

Get an environment value. Human output refuses secret-shaped values unless you pass the global --reveal-secrets flag. JSON output redacts them by default and sets contains_secrets: true. Write-only values set with --secret are never returned.

floo env get PUBLIC_API_ORIGIN --app my-app
floo env get DATABASE_URL --app my-app --reveal-secrets

Flags

Flag	Description
`--app APP`	App name or UUID (reads from config if omitted)
`--service SVC`	Target a specific service
`--env ENV`	Environment: `dev` (default) or `prod`

JSON output

{
  "success": true,
  "data": {
    "key": "DATABASE_URL",
    "value": "***REDACTED***",
    "contains_secrets": true
  }
}

list

List all environment variables for an app. Values are masked.

floo env list --app my-app

Flags

Flag	Description
`--app APP`	App name or UUID (reads from config if omitted)
`--service SVC`	Target specific services (repeatable or comma-separated)
`--env ENV`	Environment: `dev` (default) or `prod`

JSON output

{
  "success": true,
  "data": {
    "env_vars": [
      { "key": "DATABASE_URL", "masked_value": "postgres://us...***" },
      { "key": "STRIPE_SECRET_KEY", "masked_value": "sk_live_...***" }
    ]
  }
}

unset

Remove an environment variable. Keys are auto-uppercased.

floo env unset DATABASE_URL --app my-app

Flags

Flag	Description
`--app APP`	App name or UUID (reads from config if omitted)
`--service SVC`	Target specific services (repeatable or comma-separated)
`--env ENV`	Environment: `dev` (default) or `prod`

JSON output

{
  "success": true,
  "data": {
    "key": "DATABASE_URL"
  }
}

import

Import environment variables from a .env file.

floo env import .env --app my-app

Flags

Flag	Description
`--app APP`	App name or UUID (reads from config if omitted)
`--service SVC`	Target specific services (repeatable or comma-separated). Cannot combine with `--all`.
`--all`	Import env vars for all services using their configured `env_file` paths. Cannot combine with `FILE` or `--service`.
`--secret`	Mark every imported value write-only
`--env ENV`	Environment: `dev` (default) or `prod`

Examples

# Import from a specific .env file
floo env import .env --app my-app

# Import for specific services
floo env import .env --app my-app --service api --service worker

# Import for all services using their configured env_file paths
floo env import --all --app my-app

# Agent workflow: import and verify
floo env import .env --app my-app --json 2>/dev/null | jq '.data'

JSON output

{
  "success": true,
  "data": {
    "created": 3,
    "updated": 2,
    "env_vars": [
      { "key": "DATABASE_URL", "masked_value": "postgres://us...***" },
      { "key": "REDIS_URL", "masked_value": "redis://...***" }
    ]
  }
}

Errors

Code	Meaning
`NOT_AUTHENTICATED`	Run `floo auth login` first
`APP_NOT_FOUND`	No app with that name or ID
`INVALID_FORMAT`	Missing `=` in `KEY=VALUE` argument

CLI

Config

set

Flags

Examples

JSON output

get

Flags

JSON output

list

Flags

JSON output

unset

Flags

JSON output

import

Flags

Examples

JSON output

Errors

​set

​Flags

​Examples

​JSON output

​get

​Flags

​JSON output

​list

​Flags

​JSON output

​unset

​Flags

​JSON output

​import

​Flags

​Examples

​JSON output

​Errors

set

Flags

Examples

JSON output

get

Flags

JSON output

list

Flags

JSON output

unset

Flags

JSON output

import

Flags

Examples

JSON output

Errors