Ruby & Rails Secrets Management with Capy

Use capy run to decrypt .env and pass the plaintext values to your Ruby process. Your code reads env vars with ENV["KEY"] or gems like dotenv.

Install the CLI

brew install capysc/tap/capy

npm install -g @capysc/cli

bun add -g @capysc/cli

Sync your secrets

capy

Run your app

capy run -- ruby app.rb
capy run -- bundle exec rails server
capy run -- bundle exec rspec

Read env vars the standard way:

db_url = ENV["DATABASE_URL"]

Invite a teammate

capy invite teammate@example.com

Deploy

capy deploy

What’s next

Running your app

The full story on capy run.

Last modified on June 10, 2026

Go Rust

Getting started

Using Capy

Deploying

Organizations

Branches

Team

CLI reference

Under the hood

Comparisons

Ruby & Rails Secrets Management with Capy

What’s next

Running your app

​What’s next

Running your app

What’s next