LLMs read .env; not anymore.

A cross-platform .env alternative for the LLM era: secrets in your keyring, their names in your repo, spent one command at a time, never printed.

For LLMs, cat .env is just too tempting, and once it's in the transcript, it's there for good. The usual ways to live with that:

Ignore it.
Trust the provider.
Rotate the key after it leaks.

Someone will call it a skill issue. It isn't. There has never been a safe way for the people on a project to share a secret and use it, so it went in a file. C had a memory problem too, and being careful didn't fix it. Rust did.

monkeys keeps each secret in your keyring and hands it to one command at a time. Nothing prints a stored value, the command you hand it to included, so there is nothing to read.