prick yashau
cli cloudflare-access cloudflare-d1 cloudflare-workers developer-tools devops dotenv environment-variables rust secrets-management security self-hosted svelte
Use this command to install prick with WinGet:
winget install --id=yashau.prick -e prick stores secrets in your own Cloudflare account and injects them into processes at runtime. The server is one Cloudflare Worker backed by a D1 database, deployed to your account and operated by you. Values are encrypted with AES-256-GCM and each ciphertext is cryptographically bound to the environment, key and version it belongs to. Identity comes from Cloudflare Access — SSO for people, service tokens for CI. The prk client is a single static binary: "prk run -- ./deploy.sh" hands secrets to a child through its environment block and nowhere else, and every reveal is audited with the reason it happened. A web console and an MCP server ship alongside the CLI.